MoguBlog vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MO

Product

MoguBlog

by moxi624 · last CVE Oct 12, 2026

10

CVEs

0

On KEV

7.5

Max CVSS

4

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 2Medium 8Low 0

Severity

All severities10 Critical0 High2 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add MoguBlog to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-89262	7.5	1%	Sep 11	MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check Affected: through 6.2
CVE-2026-89260	7.5	1%	Sep 11	MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint Affected: through 6.2
CVE-2026-109174	6.5	0%	Oct 12	MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig Affected: through 6.2
CVE-2026-89261	6.5	1%	Sep 11	MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints Affected: through 6.2
CVE-2026-109176	5.4	0%	Oct 12	MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files Affected: through 6.2
CVE-2026-89263	5.3	0%	Sep 11	MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint Affected: through 6.2
CVE-2026-109177	4.3	0%	Oct 12	MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit Affected: through 6.2
CVE-2026-109175	4.3	0%	Oct 12	MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList Affected: through 6.2
CVE-2026-89265	4.3	0%	Sep 11	MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint Affected: through 6.2
CVE-2026-89264	4.3	0%	Sep 11	MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity Affected: through 6.2