CVE-2026-33058

8.4 highEPSS 0.3%

High (8.4) in kanboard kanboard. EPSS 0.3% chance of exploitation in the next 30 days.

Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to add users to a project can leverage this vulnerability to dump the entirety of the kanboard database. Version 1.2.51 fixes the issue.

Severity

CVSS 4.0

8.4 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kanboard:kanboard

References

https://github.com/kanboard/kanboard/security/advisories/GHSA-f62r-m4mr-2xhh

Check your stack JSON