PT-2026-6945

CVE-2026-2206

Published

2026-02-08

Updated

2026-02-08

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WeKan versions prior to 8.21

Description A security flaw exists in WeKan up to version 8.20. The issue affects unknown code within the server/methods/fixDuplicateLists.js file of the Administrative Repair Handler component, leading to improper access controls. This allows for remote exploitation.

Recommendations Upgrade to version 8.21 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Megamansec

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

CWE-266: Incorrect Privilege Assignment