Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in WeKan up to 8.20. Affected by this issue is some unknown functionality of the file server/methods/positionHistory.js of the component Position-History Tracking. The manipulation results in missing authorization. The attack may be performed from remote. Upgrading to version 8.21 can resolve this issue. The patch is identified as 55576ec17722db094835470b386162c9a662fb60. It is advisable to upgrade the affected component.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1897 A vulnerability was found in WeKan up to 8.20. Affected by this issue is some unknown functionality of the file server/methods/positionHistory.js of the component Posit… https://www.cve.org/CVERecord?id=CVE-2026-1897
Post summary
A brief disclosure of CVE-2026-1897 in WeKan up to version 8.20, mentioning affected file components but lacking exploit or patch information.
CVE-2026-1897 WeKan Authorization Bypass Vulnerability in Position-History Tracking Component https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1897
Post summary
The text announces WeKan's CVE-2026-1897 as an authorization bypass in the position-history tracking component, linking to a details page but providing no evidence of PoC, exploitation, or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wekan_project | wekan | - | - | - |