What’s Vulnerable › Products

bolo-blog bolo-solo vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your bolo-blog bolo-solo version is affected

Latest bolo-blog bolo-solo vulnerabilities

• CVE-2026-1813 — bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload (CVSS 9.8)
• CVE-2026-1812 — bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal (CVSS 9.8)
• CVE-2026-1811 — bolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversal (CVSS 8.8)
• CVE-2026-1810 — bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal (CVSS 8.8)
• CVE-2026-1691 — bolo-solo SnakeYAML BackupService.java importMarkdownsSync deserialization (CVSS 8.8)
• CVE-2023-41009 — (CVSS 9.8)