CVE-2026-21881 | kanboard up to 1.2.48 REVERSE_PROXY_AUTH improper authentication (GHSA-wwpf-3j4p-739w)

January 8, 2026 Yanac

A vulnerability classified as critical has been found in kanboard up to 1.2.48. The impacted element is an unknown function. Performing a manipulation of the argument REVERSE_PROXY_AUTH results in improper authentication.

This vulnerability is reported as CVE-2026-21881. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More