CVE-2026-28268 | go-vikunja up to 2.0.x Authentication Control cleanup

February 27, 2026 Yanac

A vulnerability, which was classified as critical, has been found in go-vikunja vikunja up to 2.0.x. This issue affects some unknown processing of the component Authentication Control Handler. The manipulation leads to incomplete cleanup.

This vulnerability is traded as CVE-2026-28268. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More