Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. Upgrading to version 8.21 is able to address this issue. This patch is called 8c0b4f79d8582932528ec2fdf2a4487c86770fb9. It is recommended to upgrade the affected component.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1895 A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a m… https://www.cve.org/CVERecord?id=CVE-2026-1895
Post summary
The text announces a new vulnerability (CVE-2026-1895) in WeKan's Attachment Storage Handler, specifically the applyWipLimit function in models/lists.js, affecting versions up to 8.20.
CVE-2026-1895 WeKan Remote Improper Access Control Vulnerability in Attachment Storage Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1895
Post summary
A new WeKan vulnerability (CVE-2026-1895) has been disclosed as an improper access control flaw in the attachment storage handler, but no PoC, exploit, patch, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wekan_project | wekan | - | - | - |