Exploit for CVE-2026-21879 CVE-2026-21879 CVE-2026-21880 CVE-2026-21881

## https://sploitus.com/exploit?id=20A435AB-E8C2-5738-A6B4-A11CD35AA25F
# Published CVEs

This repository contains my security research and published Common Vulnerabilities and Exposures (CVEs).

## Overview

| CVE ID | Vulnerability | Severity | Product | CVSS |
|--------|--------------|----------|---------|------|
| [CVE-2026-21881](./CVE-2026-21881/) | Reverse Proxy Authentication Bypass | 🔴 Critical | Kanboard ≤1.2.48 | 9.1 |
| [CVE-2026-21880](./CVE-2026-21880/) | LDAP Injection | 🟡 Medium | Kanboard ≤1.2.48 | 5.3 |
| [CVE-2026-21879](./CVE-2026-21879/) | Open Redirect | 🟡 Medium | Kanboard ≤1.2.48 | 4.7 |

## Researcher

**Mahammad Huseynkhanli**
- [LinkedIn](https://www.linkedin.com/in/mahammad-huseynkhanli-82aa75199/)
- [GitHub](https://github.com/HUSEYNKHANLI)

## Disclaimer

The proof-of-concept (PoC) scripts and information provided in this repository are intended for **educational and authorized security testing purposes only**. 

⚠️ **Do not use these tools against systems you do not own or have explicit permission to test.**

The author is not responsible for any misuse or damage caused by this material. Always follow responsible disclosure practices and applicable laws.


## References

- [Kanboard Official Repository](https://github.com/kanboard/kanboard)
- [Kanboard Security Advisories](https://github.com/kanboard/kanboard/security/advisories)