CyberRota
Back to database

CVE-2026-41454

HIGH · CVSS 8.3 EPSS 0.04% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-22 · Last synced: 2026-05-22

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-41454
Severity
HIGH
CVSS
8.3
EPSS
0.04%

Original NVD Description

WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoints that allows authenticated board members to perform administrative actions without proper privilege verification. Attackers can enumerate integrations including webhook URLs, create new integrations, modify or delete existing integrations, and manage integration activities by exploiting insufficient authorization checks in the JsonRoutes REST handlers.