Skip to content
OpenAdvisories

Vendor

v2board

1 known vulnerabilities.

Products

v2board 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-39912 Public exploit

    v2board / Xboard Authentication Token Exposure via loginWithMailLink

    V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_link_enable feature is active. Unauthenticated attackers can POST to the loginWithMailLink end…

    v2board cedar2025 v2board Xboard