Skip to contentMoxi624 Mogublog vulnerabilities
- moxi624 mogublogMoguBlog through 6.2 Broken Access Control via networkDisk moveFile and editCVE-2026-1091775.3 Medium
- moxi624 mogublogMoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk FilesCVE-2026-1091765.3 Medium
- moxi624 mogublogMoguBlog through 6.2 Broken Access Control via /networkDisk/getFileListCVE-2026-1091755.3 Medium
- moxi624 mogublogMoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfigCVE-2026-1091747.1 High
- moxi624 mogublogMoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid EndpointCVE-2026-892655.3 Medium
- moxi624 mogublogMoguBlog through 6.2 Comment Author Spoofing via Request-Body IdentityCVE-2026-892645.3 Medium
- moxi624 mogublogMoguBlog through 6.2 Missing Authentication on the Comment Email-Notification EndpointCVE-2026-892636.9 Medium
- moxi624 mogublogMoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership CheckCVE-2026-892628.7 High
- moxi624 mogublogMoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management EndpointsCVE-2026-892616.9 Medium
- moxi624 mogublogMoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback EndpointCVE-2026-892608.7 High