CVE-2026-109177

MoguBlog versions up to and including 6.2 are vulnerable to a broken access control flaw. The issue stems from a lack of admin_uid checks when processing specific requests, allowing authenticated administrators to move or rename network-disk files belonging to other administrators. By sending cra...