Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in WeKan up to 8.20. This affects an unknown part of the file packages/wekan-ldap/server/syncUser.js of the component LDAP User Sync. This manipulation causes improper access controls. It is possible to initiate the attack remotely. Upgrading to version 8.21 is able to mitigate this issue. Patch name: 146905a459106b5d00b4f09453a6554255e6965a. You should upgrade the affected component.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1898 A vulnerability was determined in WeKan up to 8.20. This affects an unknown part of the file packages/wekan-ldap/server/syncUser.js of the component LDAP User Sync. Thi… https://www.cve.org/CVERecord?id=CVE-2026-1898
Post summary
A CVE record announces a vulnerability in WeKan’s LDAP User Sync component (up to v8.20), but contains no details on exploitation, patches, or proof of concept.
CVE-2026-1898 LDAP User Sync Remote Access Control Vulnerability in WeKan up to 8.20 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1898
Post summary
The text announces a remote access control vulnerability (CVE‑2026‑1898) affecting WeKan up to version 8.20, without providing PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wekan_project | wekan | - | - | - |