Bblinkospace

Products

Exploited and recent CVEs

• CVE-2026-113597 Medium 5.4 Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures 0.3%
• CVE-2026-110774 Medium 5.3 Blinko through 1.8.8 Private Attachment Read via /api/file Route 0.2%
• CVE-2026-85624 Medium 6.5 Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList 0.4%
• CVE-2026-85607 High 8.8 Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router 0.7%
• CVE-2026-23882 High 8.6 Blinko: Admin RCE - MCP Server Command Injection 0.4%
• CVE-2026-23485 Medium 6.9 Blinko: Unauthorized Path Traversal File Enumeration - music-metadata 0.3%
• CVE-2026-23488 Medium 6.9 Blinko: multiple interfaces in the comment feature allow unauthorized access 0.3%
• CVE-2026-23487 Medium 6.0 Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token 0.2%
• CVE-2026-23486 Medium 6.9 Blinko: Unauthorized User Information Leak 0.7%
• CVE-2026-23480 Medium 5.3 Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint 0.4%
• CVE-2026-23481 Medium 5.3 Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile 0.4%
• CVE-2026-23484 Medium 5.3 Blinko: Authenticated Arbitrary File Write - saveDevPlugin 0.3%
• CVE-2026-23483 Medium 6.9 Blinko: Unauthorized Arbitrary File Read - /plugins 0.8%
• CVE-2026-23482 High 8.2 Blinko: Unauthorized Arbitrary File Read - /api/file/temp 1.5%