Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/25 1:17 p.m.•12 views

CVE-2026-88421

Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...

7.5CVSS0.00298EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•13 views

CVE-2026-88421: Improper Access Control

Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...

7.5CVSS5.8AI score0.00298EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/25 12:00 a.m.•42 views

CVE-2026-88421

Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...

0.00298EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 12:00 a.m.•12 views

EUVD-2026-87081

Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...

7.5CVSS5.8AI score0.00298EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 12:00 a.m.•13 views

CVE-2026-88421

Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...

5.8AI score0.00298EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/25 12:00 a.m.•11 views

CVE-2026-88421

Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...

8.7CVSS5.8AI score0.00298EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/25 12:00 a.m.•30 views

CVE-2026-88421

APSL puput versions v1.2.1 through v2.2.0 are vulnerable to an incorrect access control flaw in the BlogPage.get_entries() component. This vulnerability allows unauthenticated attackers to view restricted blog entries through multiple access points, including the blog index, tag, category, author...

7.5CVSS5.8AI score0.00298EPSS
SaveExploits0References1
Rows per page
Query Builder