What’s Vulnerable › Products

moxi624 MoguBlog vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your moxi624 MoguBlog version is affected

Latest moxi624 MoguBlog vulnerabilities

• CVE-2026-109177 — MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit (CVSS 4.3)
• CVE-2026-109176 — MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files (CVSS 5.4)
• CVE-2026-109175 — MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList (CVSS 4.3)
• CVE-2026-109174 — MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig (CVSS 6.5)
• CVE-2026-89265 — MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint (CVSS 4.3)
• CVE-2026-89264 — MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity (CVSS 4.3)
• CVE-2026-89263 — MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint (CVSS 5.3)
• CVE-2026-89262 — MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check (CVSS 7.5)
• CVE-2026-89261 — MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints (CVSS 6.5)
• CVE-2026-89260 — MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint (CVSS 7.5)