CVE-2026-23482

creationtimestamp| type| source ---|---|--- 2026-03-23 22:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5puj2272f 2026-04-27 12:07:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-23482.yaml...

CVE-2026-32066

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr53nxmet2n 2026-03-23 23:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr637lvre26...

CVE-2026-32299

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr53alsvy2q 2026-03-25 02:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhtzo455hr2i...

CVE-2025-60949

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr52w6h442g 2026-03-23 22:44:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr5525dmv2u 2026-03-25 22:00:15+00:00| seen|...

CVE-2026-32276

creationtimestamp| type| source ---|---|--- 2026-03-23 22:30:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4f4hwqo2c 2026-03-23 22:31:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4fviqoh2f 2026-03-23 23:34:10+00:00| seen|...

CVE-2026-32902

creationtimestamp| type| source ---|---|--- 2026-03-23 22:29:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4cx7tpn2e 2026-03-23 23:29:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr7ngsypm2g...

CVE-2026-33679

creationtimestamp| type| source ---|---|--- 2026-03-23 21:44:39+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-g9xj-752q-xh63 2026-03-24 15:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33679...

CVE-2026-23486

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...

EUVD-2026-14545

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...

CVE-2026-23882 Blinko: Admin RCE - MCP Server Command Injection

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...

CVE-2026-23488 Blinko: multiple interfaces in the comment feature allow unauthorized access

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

EUVD-2026-14544

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

CVE-2026-23488 Blinko: multiple interfaces in the comment feature allow unauthorized access

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

CVE-2026-23488

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

CVE-2026-23488

Blinko is affected prior to version 1.8.4. The /api/v1/comment/create endpoint allows unauthorized posting of comments to any note (including private ones), and /api/v1/comment/list allows unauthorized viewing of comments on all notes. The issue is fixed in version 1.8.4. CVSS v4.0 base score 6.9...

EUVD-2026-14541

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...

CVE-2026-23486

The CVE-2026-23486 vulnerability affects Blinko prior to version 1.8.4, where a publicly accessible endpoint exposed all user information (usernames, roles, and account creation dates). The issue is caused by an exposed endpoint, with impacts limited to information disclosure (low confidentiality...

CVE-2026-23486

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...

CVE-2026-23486 Blinko: Unauthorized User Information Leak

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...

CVE-2026-23486 Blinko: Unauthorized User Information Leak

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...