CVE-2026-2209
Medium
Description
A vulnerability was detected in WeKan up to 8.18. The affected element is the function setCreateTranslation of the file client/components/settings/translationBody.js of the component Custom Translation Handler. The manipulation results in improper authorization. The attack can be launched remotely. Upgrading to version 8.19 is sufficient to fix this issue. The patch is identified as f244a43771f6ebf40218b83b9f46dba6b940d7de. It is suggested to upgrade the affected component.
SeverityMedium
CVSS6.3
Exploit probability—
ProductWekan
PublishedFeb 8, 2026
First seenFeb 8, 2026
Weakness typeCWE-285CWE-285CWE-266CWE-266
How to fix
Update
- wekan_project wekan8.19 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wekan_project wekan | v < 8.19 | 8.19 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.