CVE-2026-119300 | Wekan up to 11.10 User Search users.js searchUsers searchTerm/query incorrect regex

October 30, 2026 Yanac

A vulnerability has been found in Wekan up to 11.10 and classified as problematic. This impacts the function searchUsers of the file server/publications/users.js of the component User Search. This manipulation of the argument searchTerm/query causes incorrect regular expression.

The identification of this vulnerability is CVE-2026-119300. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More