M
Vendor security profile
moxi624
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical0
CISA KEV0
Public exploit6
Patch rate%0
Avg. CVSS5.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
7
4
CVE KEV
CVE severity distribution
11toplam CVE
High3 (27%)
Medium8 (73%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%55
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
5.3
CVE-2026-109177
MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit
M
Patch status unknown
5.3
CVE-2026-109176
MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files
M
Patch status unknown
5.3
CVE-2026-109175
MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList
M
Patch status unknown
7.1
CVE-2026-109174
MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig
M
Patch status unknown
5.1
CVE-2026-90568
moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting
M
Patch status unknownEPSS %0
4.3
CVE-2026-89265
MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint
M
Patch status unknownEPSS %0
4.3
CVE-2026-89264
MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity
M
Patch status unknownEPSS %0
5.3
CVE-2026-89263
MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint
M
Patch status unknownEPSS %0
7.5
CVE-2026-89262
MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check
M
Patch status unknownEPSS %1
6.5
CVE-2026-89261
MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints
M
Patch status unknownEPSS %1