CVE-2026-33058
Medium
Description
Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to add users to a project can leverage this vulnerability to dump the entirety of the kanboard database. Version 1.2.51 fixes the issue.
SeverityMedium
CVSS6.5
Exploit probability—
ProductKanboard
PublishedMar 18, 2026
First seenMar 18, 2026
Weakness typeCWE-89SQL injection
How to fix
Update
- kanboard kanboard1.2.51 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kanboard kanboard | v < 1.2.51 | 1.2.51 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.