cedar2025 vulnerabilities

Products

• cedar2025/xboard 1

Latest cedar2025 CVEs

Newest publication first

1. CVE-2026-39912 v2board / Xboard Authentication Token Exposure via loginWithMailLink

   Published 2026-04-09

   Critical·CVSS 9.1 EPSS 0.61%

   V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_link_enable feature is active. Unauthenticated attackers can POST to the loginWithMailLink endpoint with a known em...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.