Advisories · Technology

wger.

Every CVE that names wger among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-86254 CVE record

CVSS 6.1 Medium

wger Incomplete Authorization Fix Cross-Tenant Account Deletion
- wger
- Broken access control
Not analysed yet 6 Sept 2026
CVE-2026-82544 CVE record

CVSS 5.3 Medium

wger-project wger Password Reset gym.py reset_user_password cross-site request forgery
- wger
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 30 Aug 2026