Security Advisory

CVE-2026-30689

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-27 00:00:00

Last updated 2026-07-05 01:29:51

Assigner mitre

State PUBLISHED

Description

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end code that does not offer an API service.

← Browse all CVEs View on cve.org ↗