CVE-2026-40103 - Vikunja's Scoped API tokens with projects.background permission can delete project backgrounds
CVE ID :CVE-2026-40103
Published : April 10, 2026, 5:17 p.m. | 49 minutes ago
Description :Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's scoped AP...
Related Vulnerabilities
- CVE-2026-5777: This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bri HIGH
- CVE-2026-6006: A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted e MEDIUM
- CVE-2026-6034: A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknow MEDIUM
- CVE-2026-2712: The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to mi MEDIUM
- CVE-2026-6005: A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is MEDIUM
Related Coverage
Threat Actors