comradezephyr/CVE-2026-68582-PoC

PoC

PoC for CVE-2026-68582 / GHSA-rj9j-8772-4h6c — Vikunja link-share BOLA

view exploit source poc_in_githubauthor comradezephyrpublished 2026-10-13catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-68582US	—OT elevated	0.33% (26th)	Exploit	2026-08-02
Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) vulnerability in the task-collection endpoint (GET /api/v1/projects/{project}/views/{view…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.