Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

blinko — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in blinko, with AI-generated Chinese analysis, references, and POCs.

Vendor: blinkospace

CVE IDTitleCVSSSeverityPublished
CVE-2026-23882 Blinko: Admin RCE - MCP Server Command Injection CWE-78 8.8 -2026-03-23
CVE-2026-23485 Blinko: Unauthorized Path Traversal File Enumeration - music-metadata CWE-22 5.3 -2026-03-23
CVE-2026-23488 Blinko: multiple interfaces in the comment feature allow unauthorized access CWE-639 5.3 -2026-03-23
CVE-2026-23487 Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token CWE-639 8.1 -2026-03-23
CVE-2026-23486 Blinko: Unauthorized User Information Leak CWE-200 5.3 -2026-03-23
CVE-2026-23480 Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint CWE-288 8.8 -2026-03-23
CVE-2026-23481 Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile CWE-22 8.1 -2026-03-23
CVE-2026-23484 Blinko: Authenticated Arbitrary File Write - saveDevPlugin CWE-22 6.5 -2026-03-23
CVE-2026-23483 Blinko: Unauthorized Arbitrary File Read - /plugins CWE-22--2026-03-23
CVE-2026-23482 Blinko: Unauthorized Arbitrary File Read - /api/file/temp CWE-22 5.3 -2026-03-23

All 10 known CVE vulnerabilities affecting blinko with full Chinese analysis, references, and POCs where available.