PT-2026-6946

CVE-2026-2207

Published

2026-02-08

Updated

2026-02-08

Description by

CVSS 4.0

6.9

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X

Name of the Vulnerable Software and Affected Versions WeKan versions prior to 8.21

Description A weakness exists in WeKan related to the Activity Publication Handler component, specifically in the processing of the file server/publications/activities.js. A manipulation of this component can lead to information disclosure and can be launched remotely.

Recommendations Upgrade to version 8.21 to address the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Megamansec

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-284: Improper Access Control