CVE-2026-88421

Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...

CVE-2026-88421

The software APSL puput versions v1.2.1 through v2.2.0 is vulnerable to an incorrect access control issue within the BlogPage.get_entries() component. This flaw allows unauthenticated attackers to access and view restricted blog entries through various endpoints, including the blog index, tag, ca...