CVE-2026-30689
A blog.admin v.8.0 and before system's getinfobytoken API interface contains an improper access control which leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security.
Vendor
Product
CWE
Yayın Tarihi
2026-03-27 15:16:53
Güncelleme
2026-04-02 19:57:44
Source Identifier
cve@mitre.org
KEV Date Added
-