Login Request a demo
WE
Product
Wekan
by Wekan Project · last CVE Mar 6, 2026
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities39In the news0Timeline
Severity mix
Critical 3High 13Medium 23Low 0
Severity
All severities39Critical3High13Medium23Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wekan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2206
8.8
0%
Feb 8
WeKan Administrative Repair fixDuplicateLists.js FixDuplicateBleed access control
Affected: before 8.21
CVE-2026-25859
8.8
0%
Feb 7
WeKan < 8.20 Migration Functionality Insufficient Permission Checks
Affected: before 8.20
CVE-2025-65780
8.8
0%
Dec 15
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16
Affected: before 8.16
CVE-2026-30845
8.2
0%
Mar 6
Wekan Exposes Sensitive Data through Lack of Field Filtering During Board Publication
Affected: 8.31 before 8.33
CVE-2025-65781
8.2
0%
Dec 15
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16
Affected: before 8.16
CVE-2026-30844
8.1
0%
Mar 6
Wekan Vulnerable to SSRF through Lack of Validation or Filtering in Attachment URL Loading
Affected: 8.32; 8.33
CVE-2025-65778
8.1
0%
Dec 15
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16
Affected: before 8.16
CVE-2021-3309
8.1
2%
Jan 26
packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,
Affected: before 4.87
CVE-2026-30846
7.5
0%
Mar 6
Wekan Exposes All Global Webhook Integrations through globalwebhooks Publication
Affected: 8.31 before 8.33
CVE-2026-25564
7.5
0%
Feb 7
WeKan < 8.19 Checklist Deletion IDOR via Missing Relationship Validation
Affected: before 8.19
CVE-2026-25563
7.5
0%
Feb 7
WeKan < 8.19 Checklist Creation Cross-Board IDOR
Affected: before 8.19
CVE-2026-25561
7.5
0%
Feb 7
WeKan < 8.19 Attachment Upload Object Relationship Validation Bypass
Affected: before 8.19
CVE-2025-65779
7.5
0%
Dec 15
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16
Affected: before 8.16
Showing 13