Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into projects they cannot access. This vulnerability is fixed in 1.2.50.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25531 Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicat… https://www.cve.org/CVERecord?id=CVE-2026-25531
Post summary
The text merely references CVE-2026-25531 in Kanboard and provides no further detail on exploitation, patching, or technical characteristics.
CVE-2026-25531 Authenticated Project Task Duplication Vulnerability in Kanboard Before 1.2.50 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25531
Post summary
The text announces CVE-2026-25531, an authenticated project task duplication vulnerability affecting Kanboard versions before 1.2.50.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | kanboard | kanboard | - | - | - |