Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:22:43 +0000 CVE-2026-89263 — MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint https://vulnerability.circl.lu/vuln/cve-2026-89263 <p><strong>Affected:</strong> moxi624 MoguBlog</p> <p>MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbitrary users. Remote callers can modify the startEmailNotification flag in Redis cache for any user identifier to suppress reply notifications without authorization.</p> <p><strong>Affected:</strong> moxi624 MoguBlog</p> <p>MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbitrary users. Remote callers can modify the startEmailNotification flag in Redis cache for any user identifier to suppress reply notifications without authorization.</p> https://vulnerability.circl.lu/vuln/cve-2026-89263