tag

Admin-Bypass

Kanboard — Missing Access Control on Plugin Installation Leads to Administrative RCE via Webshell Plugin (CVE-2026-25924)

CVE-2026-25924 / GHSA-grch-p7vf-vc4f· Kanboard (project management application) patched