wekan project wekan

Name: wekan project wekan
Brand: wekan project

productUS

cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical13high17medium0low

updated 2026-10-28

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-31779US	medium5.4	0.56% (46th)	Exploit	no fix	2023-05-22	≤ 6.84
CVE-2021-3309US	high8.1	1.72% (77th)	—	4.87	2021-01-26	< 4.87
CVE-2018-1000549US	medium5.3	1.30% (70th)	—	no fix	2018-06-26	= 1.04.0
CVE-2023-28485US	medium5.4	0.97% (62nd)	—	6.75	2023-06-26	< 6.75
CVE-2021-20654US	medium5.4	0.75% (55th)	—	no fix	2021-02-10	3.12 → 4.11
CVE-2026-25560US	critical9.8	0.74% (55th)	—	8.19	2026-02-07	< 8.19
CVE-2026-2207US	—	0.40% (34th)	—	8.21	2026-02-08	< 8.21
CVE-2026-25859US	high8.8OT elevated	0.39% (33rd)	—	8.20	2026-02-07	< 8.20
CVE-2025-65778US	high8.1	0.38% (32nd)	—	8.16	2025-12-15	< 8.16
CVE-2026-1963US	critical9.8	0.36% (30th)	—	8.21	2026-02-05	< 8.21
CVE-2026-1962US	critical9.8	0.36% (30th)	—	8.21	2026-02-05	< 8.21
CVE-2026-30846US	high7.5OT elevated	0.36% (29th)	—	8.33	2026-03-06	8.31 → 8.33
CVE-2025-65781US	high8.2	0.34% (28th)	—	8.16	2025-12-15	< 8.16
CVE-2026-1897US	—OT elevated	0.34% (27th)	—	8.21	2026-02-05	< 8.21
CVE-2025-65780US	high8.8	0.34% (27th)	—	8.16	2025-12-15	< 8.16
CVE-2026-25562US	medium4.3	0.33% (25th)	—	8.19	2026-02-07	< 8.19
CVE-2026-25563US	high7.5	0.32% (25th)	—	8.19	2026-02-07	< 8.19
CVE-2026-25561US	high7.5OT elevated	0.32% (25th)	—	8.19	2026-02-07	< 8.19
CVE-2026-25564US	high7.5	0.32% (24th)	—	8.19	2026-02-07	< 8.19
CVE-2025-65779US	high7.5	0.31% (24th)	—	8.16	2025-12-15	< 8.16
CVE-2026-25565US	medium6.5OT elevated	0.31% (24th)	—	8.19	2026-02-07	< 8.19
CVE-2026-1895US	medium6.3	0.31% (24th)	—	8.21	2026-02-04	< 8.21
CVE-2026-1896US	—	0.31% (24th)	—	8.21	2026-02-05	< 8.21
CVE-2026-30845US	high8.2OT elevated	0.31% (24th)	—	8.33	2026-03-06	8.31 → 8.33
CVE-2026-1898US	—	0.30% (23rd)	—	8.21	2026-02-05	< 8.21
CVE-2026-2208US	medium6.5OT elevated	0.28% (21st)	—	8.21	2026-02-08	< 8.21
CVE-2026-2206US	high8.8	0.28% (20th)	—	8.21	2026-02-08	< 8.21
CVE-2026-25567US	medium4.3	0.28% (20th)	—	8.19	2026-02-07	< 8.19
CVE-2026-2205US	—	0.27% (20th)	—	8.21	2026-02-08	< 8.21
CVE-2026-1892US	—	0.27% (19th)	—	8.21	2026-02-04	< 8.21
CVE-2026-1894US	medium5.4	0.27% (18th)	—	8.21	2026-02-04	< 8.21
CVE-2025-65782US	medium6.5	0.26% (18th)	—	no fix	2025-12-15	≤ 8.15
CVE-2026-1964US	medium5.3	0.25% (17th)	—	8.21	2026-02-05	< 8.21
CVE-2026-25566US	medium5.4OT elevated	0.25% (16th)	—	8.19	2026-02-07	< 8.19
CVE-2026-30844US	high8.1	0.24% (16th)	—	no fix	2026-03-06	2 versions
CVE-2026-30847US	medium6.5	0.24% (16th)	—	8.33	2026-03-06	8.31 → 8.33
CVE-2026-30843US	medium6.5	0.23% (13th)	—	no fix	2026-03-06	2 versions
CVE-2026-25568US	medium4.3OT elevated	0.22% (12th)	—	8.19	2026-02-07	< 8.19
CVE-2026-2209US	medium4.3	0.22% (12th)	—	8.19	2026-02-08	< 8.19

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control11 CVEs
CWE-266Incorrect Privilege Assignment10 CVEs
CWE-863Incorrect Authorization7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-285Improper Authorization5 CVEs
CWE-639Authorization Bypass Through User-Controlled Key4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-862Missing Authorization3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan