CVE-2025-65779

—

CVSS 3.1

7.5 high

EPSS

<1%p23

Published

Dec 15, 2025 (Dec 15, 2025)

Modified

Jun 17, 2026

Description

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticated attackers can update a board's "sort" value (Boards.allow returns true without verifying userId), allowing arbitrary reordering of boards.

Vendors: wekan project
Products: wekan
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.