Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

blinko — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in blinko, with AI-generated Chinese analysis, references, and POCs.

Vendor: blinkospace

CVE ID Title CVSS Severity Published
CVE-2026-108980 Blinko 1.8.8 目录遍历致远程代码执行 CWE-24 8.8 High 2026-10-12
CVE-2026-85624 Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList CWE-639 6.5 Medium 2026-09-04
CVE-2026-85607 Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router CWE-639 8.8 High 2026-09-04
CVE-2026-23882 Blinko: Admin RCE - MCP Server Command Injection CWE-78 8.8 - 2026-03-23
CVE-2026-23485 Blinko: Unauthorized Path Traversal File Enumeration - music-metadata CWE-22 5.3 - 2026-03-23
CVE-2026-23488 Blinko: multiple interfaces in the comment feature allow unauthorized access CWE-639 5.3 - 2026-03-23
CVE-2026-23487 Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token CWE-639 8.1 - 2026-03-23
CVE-2026-23486 Blinko: Unauthorized User Information Leak CWE-200 5.3 - 2026-03-23
CVE-2026-23480 Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint CWE-288 8.8 - 2026-03-23
CVE-2026-23481 Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile CWE-22 8.1 - 2026-03-23
CVE-2026-23484 Blinko: Authenticated Arbitrary File Write - saveDevPlugin CWE-22 6.5 - 2026-03-23
CVE-2026-23483 Blinko: Unauthorized Arbitrary File Read - /plugins CWE-22 - - 2026-03-23
CVE-2026-23482 Blinko: Unauthorized Arbitrary File Read - /api/file/temp CWE-22 5.3 - 2026-03-23

All 13 known CVE vulnerabilities affecting blinko with full Chinese analysis, references, and POCs where available.