https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:52:59.884239+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-89264 CVE-2026-89264 — MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity 2026-10-08T04:52:59.885643+00:00

Affected: moxi624 MoguBlog

MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user. Attackers can supply arbitrary userUid values in the request body to impersonate other accounts including administrators.