CVE-2026-40103 - Vikunja's Scoped API tokens with projects.background permission can delete project backgrounds
CVE ID :CVE-2026-40103
Published : April 10, 2026, 5:17 p.m. | 49 minutes ago
Description :Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's scoped AP...
Related Vulnerabilities
- CVE-2026-6036: A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. The impacted elem MEDIUM
- CVE-2026-5053: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability al HIGH
- CVE-2026-35621: OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command HIGH
- CVE-2026-2712: The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to mi MEDIUM
- CVE-2026-4482: The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted MEDIUM
Related Coverage
Threat Actors