Blinko vulnerabilities

Products

• Blinko 11

Newest

• blinko Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via... CVE-2026-108980 8.8 HighOctober 12, 2026
• blinko Blinko: Admin RCE - MCP Server Command Injection CVE-2026-23882 8.6 HighMarch 23, 2026
• blinko Blinko: Unauthorized Path Traversal File Enumeration - music-metadata CVE-2026-23485 6.9 MediumMarch 23, 2026
• blinko Blinko: multiple interfaces in the comment feature allow unauthorized access CVE-2026-23488 6.9 MediumMarch 23, 2026
• blinko Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token CVE-2026-23487 6.0 MediumMarch 23, 2026
• blinko Blinko: Unauthorized User Information Leak CVE-2026-23486 6.9 MediumMarch 23, 2026
• blinko Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint CVE-2026-23480 5.3 MediumMarch 23, 2026
• blinko Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile CVE-2026-23481 5.3 MediumMarch 23, 2026
• blinko Blinko: Authenticated Arbitrary File Write - saveDevPlugin CVE-2026-23484 5.3 MediumMarch 23, 2026
• blinko Blinko: Unauthorized Arbitrary File Read - /plugins CVE-2026-23483 6.9 MediumMarch 23, 2026
• blinko Blinko: Unauthorized Arbitrary File Read - /api/file/temp CVE-2026-23482 8.2 HighMarch 23, 2026