Multiple Vulnerabilities Discovered in WeKan Affecting Versions Up to 8.20

Two vulnerabilities have been identified in WeKan versions up to 8.20, impacting the Administrative Repair Handler and Position-History Tracking components. CVE-2026-2206, published on 2026-02-08, involves improper access controls, while CVE-2026-1897, published on 2026-02-05, relates to missing authorization. Both vulnerabilities can be exploited remotely and are resolved by upgrading to version 8.21.