Vikunja

Everything Firewall Scoop has reported about Vikunja: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

CVE-2026-68582: Vikunja 2.4.0 Patches Critical IDOR Exposing User Data via Share Links

A critical identity flaw in Vikunja versions prior to 2.4.0 lets attackers use valid share links to scrape task data and user details from any project on the server.

Oct 10, 2026

Vulnerabilities

CVSS 8.1: Vikunja 2.4.0 Patches Plaintext Token Leak Enabling Account Takeover

Vikunja version 2.4.0 addresses a high-severity flaw where password-reset and other tokens were stored in plaintext, allowing database readers to hijack accounts.

Oct 10, 2026