CVE-2026-91981 in Vikunjainfo

Zusammenfassung

von MITRE • 15.09.2026

Vikunja versions before 2.6.0 fail to properly validate link-share tokens in the v2 API user search endpoints. Attackers with a read-only share link can enumerate project users via the projects endpoint and confirm arbitrary usernames exist via the global search endpoint.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

VulnCheck

Reservieren

15.09.2026

Veröffentlichung

15.09.2026

Moderieren

akzeptiert

Eintrag

VDB-404327

CPE

bereit

CWE

CWE-200 (bestätigt)

CVSS

4.3 (CNA)

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-91981
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-91981
CVE Details	https://www.cvedetails.com/cve/CVE-2026-91981/

◂ Zurück Übersicht Weiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!