CVE-2026-88421

Published: Sep 25, 2026Modified: Sep 25, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://gist.github.com/itsmohitnarayan/736225bd6cd79031a5dfbf56acdb14ae

Source: cve@mitre.org

https://gist.github.com/itsmohitnarayan/736225bd6cd79031a5dfbf56acdb14ae

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.