CVE-2026-127215 | Softaculous Kanbanz Plugin up to 1.0.2 Admin Ajax kanbanz_user_can_access_board board_id/task_id access control

November 13, 2026 Yanac

A vulnerability was found in Softaculous Kanbanz Plugin up to 1.0.2 and classified as critical. This vulnerability affects the function kanbanz_user_can_access_board of the component Admin Ajax Handler. Executing a manipulation of the argument board_id/task_id can lead to improper access controls.

This vulnerability appears as CVE-2026-127215. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More