CVE-2026-109176

MoguBlog versions through 6.2 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. The issue exists because the NetworkDiskServiceImpl.deleteFile method fails to validate the file or folder uid against the admin_uid. This allows authenticated administrators to delete files ...

CVE-2019-18574

RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could th...