Blinko kayıtları
blinko üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %80
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5
- CWE-639 Authorization Bypass Through User-Controlled Key2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-23882İstismar yok | Blinko: Admin RCE - MCP Server Command Injectionblinko · blinko · CWE-78 | Yüksek8,6 | — | %0,4 | 23 Mar 2026 |
32İzleyin | CVE-2026-23482Kavram kanıtı | Blinko: Unauthorized Arbitrary File Read - /api/file/tempblinko · blinko · CWE-22 | Yüksek8,2 | — | %1,5 | 23 Mar 2026 |
27İzleyin | CVE-2026-23483Kavram kanıtı | Blinko: Unauthorized Arbitrary File Read - /pluginsblinko · blinko · CWE-22 | Orta6,9 | — | %0,8 | 23 Mar 2026 |
27İzleyin | CVE-2026-23486Kavram kanıtı | Blinko: Unauthorized User Information Leakblinko · blinko · CWE-200 | Orta6,9 | — | %0,7 | 23 Mar 2026 |
27İzleyin | CVE-2026-23488İstismar yok | Blinko: multiple interfaces in the comment feature allow unauthorized accessblinko · blinko · CWE-639 | Orta6,9 | — | %0,3 | 23 Mar 2026 |
27İzleyin | CVE-2026-23485İstismar yok | Blinko: Unauthorized Path Traversal File Enumeration - music-metadatablinko · blinko · CWE-22 | Orta6,9 | — | %0,3 | 23 Mar 2026 |
24İzleyin | CVE-2026-23487İstismar yok | Blinko: IDOR - user.detail Endpoint Leaks Superadmin Tokenblinko · blinko · CWE-639 | Orta6,0 | — | %0,2 | 23 Mar 2026 |
21İzleyin | CVE-2026-23481İstismar yok | Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFileblinko · blinko · CWE-22 | Orta5,3 | — | %0,4 | 23 Mar 2026 |
21İzleyin | CVE-2026-23480İstismar yok | Blinko: Low Privilege User Privilege Escalation - upsertUser Endpointblinko · blinko · CWE-288 | Orta5,3 | — | %0,3 | 23 Mar 2026 |
21İzleyin | CVE-2026-23484İstismar yok | Blinko: Authenticated Arbitrary File Write - saveDevPluginblinko · blinko · CWE-22 | Orta5,3 | — | %0,3 | 23 Mar 2026 |
- CVE-2026-2388234İzleyin
Blinko: Admin RCE - MCP Server Command Injection
YüksekCVSS 8,6İstismar yokEPSS %0blinko · blinko23 Mar 2026
- CVE-2026-2348232İzleyin
Blinko: Unauthorized Arbitrary File Read - /api/file/temp
YüksekCVSS 8,2Kavram kanıtıEPSS %2blinko · blinko23 Mar 2026
- CVE-2026-2348327İzleyin
Blinko: Unauthorized Arbitrary File Read - /plugins
OrtaCVSS 6,9Kavram kanıtıEPSS %1blinko · blinko23 Mar 2026
- CVE-2026-2348627İzleyin
Blinko: Unauthorized User Information Leak
OrtaCVSS 6,9Kavram kanıtıEPSS %1blinko · blinko23 Mar 2026
- CVE-2026-2348827İzleyin
Blinko: multiple interfaces in the comment feature allow unauthorized access
OrtaCVSS 6,9İstismar yokEPSS %0blinko · blinko23 Mar 2026
- CVE-2026-2348527İzleyin
Blinko: Unauthorized Path Traversal File Enumeration - music-metadata
OrtaCVSS 6,9İstismar yokEPSS %0blinko · blinko23 Mar 2026
- CVE-2026-2348724İzleyin
Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token
OrtaCVSS 6,0İstismar yokEPSS %0blinko · blinko23 Mar 2026
- CVE-2026-2348121İzleyin
Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile
OrtaCVSS 5,3İstismar yokEPSS %0blinko · blinko23 Mar 2026
- CVE-2026-2348021İzleyin
Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint
OrtaCVSS 5,3İstismar yokEPSS %0blinko · blinko23 Mar 2026
- CVE-2026-2348421İzleyin
Blinko: Authenticated Arbitrary File Write - saveDevPlugin
OrtaCVSS 5,3İstismar yokEPSS %0blinko · blinko23 Mar 2026