Login Request a demo
WE
Product
wekan
by wekan · last CVE Aug 19, 2026
35
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 4High 18Medium 13Low 0
Severity
All severities35Critical4High18Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add wekan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-52891
9.9
1%
Jul 15
Wekan: Shell Injection via Avatar Upload
Affected: < 9.07
CVE-2026-55652
9.8
1%
Jul 15
Wekan: Header-login IP allowlist bypass via X-Forwarded-For spoofing in Wekan allows unauthenticated full account takeover (incl. admin)
Affected: < 9.46
CVE-2026-25560
9.8
1%
Feb 7
WeKan < 8.19 LDAP Authentication Filter Injection
Affected: before 8.19
CVE-2026-52893
9.2
0%
Jul 15
Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook
Affected: < 9.32
Showing 4