Blinko records
10 published records for vendor blinko.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 80%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5
- CWE-639 Authorization Bypass Through User-Controlled Key2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2026-23882No exploit | Blinko: Admin RCE - MCP Server Command Injectionblinko · blinko · CWE-78 | High8.6 | — | 0.3% | Mar 23, 2026 |
32Monitor | CVE-2026-23482Proof of concept | Blinko: Unauthorized Arbitrary File Read - /api/file/tempblinko · blinko · CWE-22 | High8.2 | — | 1.5% | Mar 23, 2026 |
27Monitor | CVE-2026-23483Proof of concept | Blinko: Unauthorized Arbitrary File Read - /pluginsblinko · blinko · CWE-22 | Medium6.9 | — | 0.7% | Mar 23, 2026 |
27Monitor | CVE-2026-23486Proof of concept | Blinko: Unauthorized User Information Leakblinko · blinko · CWE-200 | Medium6.9 | — | 0.7% | Mar 23, 2026 |
27Monitor | CVE-2026-23488No exploit | Blinko: multiple interfaces in the comment feature allow unauthorized accessblinko · blinko · CWE-639 | Medium6.9 | — | 0.3% | Mar 23, 2026 |
27Monitor | CVE-2026-23485No exploit | Blinko: Unauthorized Path Traversal File Enumeration - music-metadatablinko · blinko · CWE-22 | Medium6.9 | — | 0.3% | Mar 23, 2026 |
24Monitor | CVE-2026-23487No exploit | Blinko: IDOR - user.detail Endpoint Leaks Superadmin Tokenblinko · blinko · CWE-639 | Medium6.0 | — | 0.2% | Mar 23, 2026 |
21Monitor | CVE-2026-23481No exploit | Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFileblinko · blinko · CWE-22 | Medium5.3 | — | 0.3% | Mar 23, 2026 |
21Monitor | CVE-2026-23480No exploit | Blinko: Low Privilege User Privilege Escalation - upsertUser Endpointblinko · blinko · CWE-288 | Medium5.3 | — | 0.3% | Mar 23, 2026 |
21Monitor | CVE-2026-23484No exploit | Blinko: Authenticated Arbitrary File Write - saveDevPluginblinko · blinko · CWE-22 | Medium5.3 | — | 0.3% | Mar 23, 2026 |
- CVE-2026-2388234Monitor
Blinko: Admin RCE - MCP Server Command Injection
HighCVSS 8.6No exploitEPSS 0%blinko · blinkoMar 23, 2026
- CVE-2026-2348232Monitor
Blinko: Unauthorized Arbitrary File Read - /api/file/temp
HighCVSS 8.2Proof of conceptEPSS 1%blinko · blinkoMar 23, 2026
- CVE-2026-2348327Monitor
Blinko: Unauthorized Arbitrary File Read - /plugins
MediumCVSS 6.9Proof of conceptEPSS 0%blinko · blinkoMar 23, 2026
- CVE-2026-2348627Monitor
Blinko: Unauthorized User Information Leak
MediumCVSS 6.9Proof of conceptEPSS 0%blinko · blinkoMar 23, 2026
- CVE-2026-2348827Monitor
Blinko: multiple interfaces in the comment feature allow unauthorized access
MediumCVSS 6.9No exploitEPSS 0%blinko · blinkoMar 23, 2026
- CVE-2026-2348527Monitor
Blinko: Unauthorized Path Traversal File Enumeration - music-metadata
MediumCVSS 6.9No exploitEPSS 0%blinko · blinkoMar 23, 2026
- CVE-2026-2348724Monitor
Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token
MediumCVSS 6.0No exploitEPSS 0%blinko · blinkoMar 23, 2026
- CVE-2026-2348121Monitor
Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile
MediumCVSS 5.3No exploitEPSS 0%blinko · blinkoMar 23, 2026
- CVE-2026-2348021Monitor
Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint
MediumCVSS 5.3No exploitEPSS 0%blinko · blinkoMar 23, 2026
- CVE-2026-2348421Monitor
Blinko: Authenticated Arbitrary File Write - saveDevPlugin
MediumCVSS 5.3No exploitEPSS 0%blinko · blinkoMar 23, 2026