Blinkospace vulnerabilities

Products

• Blinko 15

Newest

• blinkospace blinko Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures CVE-2026-113597 5.3 MediumOctober 20, 2026
• blinkospace blinko Blinko through 1.8.8 Private Attachment Read via /api/file Route CVE-2026-110774 6.0 MediumOctober 14, 2026
• blinko Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via... CVE-2026-108980 8.8 HighOctober 12, 2026
• blinkospace blinko Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList CVE-2026-85624 7.1 HighSeptember 4, 2026
• blinkospace blinko Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router CVE-2026-85607 8.7 HighSeptember 4, 2026
• blinko Blinko: Admin RCE - MCP Server Command Injection CVE-2026-23882 8.6 HighMarch 23, 2026
• blinko Blinko: Unauthorized Path Traversal File Enumeration - music-metadata CVE-2026-23485 6.9 MediumMarch 23, 2026
• blinko Blinko: multiple interfaces in the comment feature allow unauthorized access CVE-2026-23488 6.9 MediumMarch 23, 2026
• blinko Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token CVE-2026-23487 6.0 MediumMarch 23, 2026
• blinko Blinko: Unauthorized User Information Leak CVE-2026-23486 6.9 MediumMarch 23, 2026
• blinko Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint CVE-2026-23480 5.3 MediumMarch 23, 2026
• blinko Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile CVE-2026-23481 5.3 MediumMarch 23, 2026
• blinko Blinko: Authenticated Arbitrary File Write - saveDevPlugin CVE-2026-23484 5.3 MediumMarch 23, 2026
• blinko Blinko: Unauthorized Arbitrary File Read - /plugins CVE-2026-23483 6.9 MediumMarch 23, 2026
• blinko Blinko: Unauthorized Arbitrary File Read - /api/file/temp CVE-2026-23482 8.2 HighMarch 23, 2026