Beveiligingsadvies
CVE-2026-89262
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint that performs ownership checks against request-body fields instead of the authenticated principal. Attackers can delete arbitrary comments and their replies by supplying comment UIDs and author UIDs obtained from unauthenticated listing endpoints.