PT-2026-6945 · Wekan · Wekan

Megamansec · Publicado 2026-02-08 · Atualizado 2026-02-08 · CVE-2026-2206

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WeKan versions prior to 8.21

Description A security flaw exists in WeKan up to version 8.20. The issue affects unknown code within the server/methods/fixDuplicateLists.js file of the Administrative Repair Handler component, leading to improper access controls. This allows for remote exploitation.

Recommendations Upgrade to version 8.21 to resolve the issue.

Correção

Improper Access Control

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-284

CWE-266

Identificadores relacionados

CVE-2026-2206

Produtos afetados

Wekan

Referências · 11

• https://github.com/wekan/wekan/commit/4ce181d17249778094f73d21515f7f863f554743 · Correção
• https://github.com/wekan/wekan/releases/tag/v8.21 · Correção
• https://vuldb.com/?submit.752162 · Nota
• https://vuldb.com/?id.344920 · Nota
• https://twitter.com/CVEnew/status/2020356551526023230 · Publicação no Twitter
• https://vuldb.com/?ctiid.344920 · Nota
• https://github.com/wekan/wekan · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2206 · Nota de Segurança
• https://t.me/cveNotify/151276 · Publicação no Telegram
• https://t.me/CVEtracker/44076 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-2206 · Aviso do Fabricante