CVE-2026-91973 in Vikunjainformación

Resumen

por MITRE • 2026-09-15

Vikunja before 2.6.0 contains an authentication bypass vulnerability in CalDAV BasicAuth endpoints that lack rate limiting protection. Remote unauthenticated attackers can issue unbounded credential-guessing requests against /dav, /.well-known, and /feeds routes to bypass the instance's anti-brute-force controls and compromise password-only accounts.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Reservar

2026-09-15

Divulgación

2026-09-15

Moderación

aceptado

Artículo

VDB-404277

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-91973
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-91973
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-91973/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!