CVE-2026-53446 | Wekan up to 9.31 Webhook models/integrations.js validateAttachmentUrl server-side request forgery

July 16, 2026 Yanac

A vulnerability classified as problematic has been found in Wekan up to 9.31. The impacted element is the function validateAttachmentUrl of the file models/integrations.js of the component Webhook. This manipulation causes server-side request forgery.

This vulnerability is handled as CVE-2026-53446. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More