WeKan vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WE

Product

WeKan

by · last CVE Feb 8, 2026

14

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 2High 1Medium 11Low 0

Severity

All severities14 Critical2 High1 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WeKan to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-1963	9.8	0%	Feb 5	WeKan Attachment Storage attachments.js MoveStorageBleed access control Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-1962	9.8	0%	Feb 5	WeKan Attachment Migration attachmentMigration.js AttachmentMigrationBleed access control Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-2206	8.8	0%	Feb 8	WeKan Administrative Repair fixDuplicateLists.js FixDuplicateBleed access control Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-2208	6.5	0%	Feb 8	WeKan Rules rules.js RulesBleed authorization Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-1898	6.3	0%	Feb 5	WeKan LDAP User Sync syncUser.js SyncLDAPBleed access control Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-1896	6.3	0%	Feb 4	WeKan Migration Operation comprehensiveBoardMigration.js ComprehensiveBoardMigration MigrationBleed access control Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-1895	6.3	0%	Feb 4	WeKan Attachment Storage lists.js applyWipLimit ListWIPBleed access control Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-1894	5.4	0%	Feb 4	WeKan REST API checklistItems.js Checklist REST Bleed improper authorization Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-2207	5.3	0%	Feb 8	WeKan Activity Publication activities.js LinkedBoardActivitiesBleed information disclosure Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-1964	5.3	0%	Feb 5	WeKan REST Endpoint boards.js BoardTitleRESTBleed access control Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-1892	5.0	0%	Feb 4	WeKan REST API boards.js setBoardOrgs improper authorization Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-2209	4.3	0%	Feb 8	WeKan Custom Translation translationBody.js setCreateTranslation improper authorization Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +13 more
CVE-2026-2205	4.3	0%	Feb 8	WeKan Meteor Publication cards.js CardPubSubBleed information disclosure Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more
CVE-2026-1897	4.3	0%	Feb 5	WeKan Position-History Tracking positionHistory.js PositionHistoryBleed authorization Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; +15 more