moxi624 MoguBlog

• CVE-2026-109177 Medium 4.3 MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit 0.2%
• CVE-2026-109176 Medium 5.4 MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files 0.2%
• CVE-2026-109175 Medium 4.3 MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList 0.2%
• CVE-2026-109174 Medium 6.5 MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig 0.2%
• CVE-2026-89265 Medium 4.3 MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint 0.4%
• CVE-2026-89264 Medium 4.3 MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity 0.4%
• CVE-2026-89263 Medium 5.3 MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint 0.5%
• CVE-2026-89262 High 7.5 MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check 0.5%
• CVE-2026-89261 Medium 6.5 MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints 0.8%
• CVE-2026-89260 High 7.5 MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint 0.7%