CVE-2026-129260

A path traversal vulnerability exists in Mereithhh VanBlog up to version 0.54.0 . The flaw is located in the fs.readFileSync function within the local.provider.ts file of the Custom Page Handler component. An attacker can exploit this remotely by manipulating the path argument to access unauthori...

EUVD-2026-125941

A security vulnerability has been detected in Mereithhh VanBlog up to 0.54.0. This vulnerability affects the function fs.readFileSync of the file local.provider.ts of the component Custom Page Handler. The manipulation of the argument path leads to path traversal. The attack is possible to be...

CVE-2026-129259

A cross-site scripting (XSS) vulnerability exists in Mereithhh VanBlog versions up to 0.54.0 . The flaw is located within an unspecified part of the packages/server/src/types/access/access.ts file, specifically affecting the Image Upload Endpoint component. An attacker can execute a remote manipu...

EUVD-2026-125936

A weakness has been identified in Mereithhh VanBlog up to 0.54.0. This affects an unknown part of the file packages/server/src/types/access/access.ts of the component Image Upload Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit...