CVE-2026-91981 in Vikunja정보

요약

\~에 의해 MITRE • 2026. 09. 15.

Vikunja versions before 2.6.0 fail to properly validate link-share tokens in the v2 API user search endpoints. Attackers with a read-only share link can enumerate project users via the projects endpoint and confirm arbitrary usernames exist via the global search endpoint.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

VulnCheck

예약하다

2026. 09. 15.

공개

2026. 09. 15.

모더레이션

수락

항목

VDB-404327

CPE

준비됨

CWE

CWE-200 (확인됨)

CVSS

4.3 (CNA)

EPSS

0.00000

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-91981
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-91981
CVE Details	https://www.cvedetails.com/cve/CVE-2026-91981/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!