CVE Feed

    Dashboard / CVE / CVE-2026-30689

    CVE-2026-30689

    In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end code that does not offer an API service.

    Published:Mar 27, 2026
    Last Modified:Jul 31, 2026
    EPS:Mar 27, 2026
    EPSS Score:0.00277
    CVSS Score:4.3

    Affected Products

    Vendor
    Anjoy8
    Product
    Blog.admin

    Exploits

    https://gist.github.com/Sw3092567023/c420c6a5ee947d72aeab2b3e0ba92a40

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High