GO-2026-4551

vendorUSosv

Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change in code.vikunja.io/api

view advisory published 2026-02-27Licence: per source

Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change in code.vikunja.io/api

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-27575US——
Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to set weak passwords (e.g., 1234, password) without enforcing…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan