Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-25531

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into projects they cannot access. This vulnerability is fixed in 1.2.50.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2026-25531


Contact Us

Shodan ® - All rights reserved