moxi624 MoguBlog vulnerabilities

Newest CVEs

• CVE-2026-109177

  MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-109176

  MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-109175

  MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-109174

  MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig

  moxi624 · MoguBlog

  High7.1
• CVE-2026-89265

  MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-89264

  MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-89263

  MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint

  moxi624 · MoguBlog

  Medium6.9
• CVE-2026-89262

  MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check

  moxi624 · MoguBlog

  High8.7
• CVE-2026-89261

  MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints

  moxi624 · MoguBlog

  Medium6.9
• CVE-2026-89260

  MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint

  moxi624 · MoguBlog

  High8.7