CVE-2026-41455 | WeKan up to 8.34.x URL url schema server-side request forgery

April 23, 2026 Yanac

A vulnerability has been found in WeKan up to 8.34.x and classified as critical. This affects an unknown part of the component URL Handler. The manipulation of the argument url schema leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-41455. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More