Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #10

High-severity flaw found in Vikunja task manager

Original: 🟠 CVE-2026-62376 - High (8.1) Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 st

A new vulnerability, CVE-2026-62376, rated high at 8.1, affects Vikunja, an open-source self-hosted task management platform. Versions before 2.4.0 stored password-reset, email-confirmation and account-deletion tokens in plaintext in the user_tokens table, meaning anyone with read access to the database could hijack account actions. Users are being urged to update to 2.4.0 or later.

Why now: Self-hosters and admins are sharing the advisory so they can patch before the plaintext token flaw is exploited.

VikunjaCVE-2026-62376

Open on mastodon →

Evidence

• 🟠 CVE-2026-62376 - High (8.1) Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the `user_tokens` table in plaintext. If an attacker gains read access to the… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1656418