CVE-2026-89262Proof of concept (PoC) published · CISASuited to automated attack · CISA
MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check
CVSS score
7.5
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2026-89260
MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint
M
Patch status unknownEPSS %1
6.5
CVE-2026-89261
MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints
M
Patch status unknownEPSS %1
5.3
CVE-2026-89263
MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint
M
Patch status unknownEPSS %0
5.1
CVE-2026-90568
moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting
M
Patch status unknownEPSS %0
7.1
CVE-2026-109174
MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig
M
Patch status unknownEPSS %0
4.3
CVE-2026-89265
MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint
M
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-89262"