Beveiligingsadvies

CVE-2026-89263

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-11 15:25:17

Laatst bijgewerkt 2026-09-11 15:25:17

Toegewezen door VulnCheck

CVSS-score 6.9

Status PUBLISHED

Beschrijving

MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbitrary users. Remote callers can modify the startEmailNotification flag in Redis cache for any user identifier to suppress reply notifications without authorization.

← Alle CVE's bekijken Bekijk op cve.org ↗