Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attachmentMigration.js of the component Attachment Migration. The manipulation leads to improper access controls. The attack may be initiated remotely. Upgrading to version 8.21 is sufficient to resolve this issue. The identifier of the patch is 053bf1dfb76ef230db162c64a6ed50ebedf67eee. It is recommended to upgrade the affected component.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1962 A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attachmentMigration.js of the component Attachment Mi… https://www.cve.org/CVERecord?id=CVE-2026-1962
Post summary
A new CVE-2026-1962 vulnerability has been reported in WeKan up to version 8.20, affecting an unspecified function in attachmentMigration.js, with no additional details or PoC disclosed.
CVE-2026-1962 WeKan Attachment Migration Remote Improper Access Control Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1962
Post summary
A new CVE (CVE-2026-1962) is announced for WeKan's attachment migration, describing a remote improper access control flaw, but no further details on exploitation or mitigation are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wekan_project | wekan | - | - | - |