Latest: CVE-2026-21881 - Kanboard is Vulnerable to Reverse Proxy Authentication Bypass

CVE ID : CVE-2026-21881 Published : Jan. 8, 2026, 2:15 a.m. | 22 minutes ago Description : Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below is vulnerable to a critical authentication bypass when REVERSE_PROXY_AUTH is enabled. The application blindly trusts HTTP headers for user authentication without verifying the request originated from a trusted reverse proxy. An attacker can impersonate any user, including administrators, by simply sending a spoofed HTTP header. This issue is fixed in version 1.2.49. Severity: 9.1 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor