Branches de versions concernées
Vulnérabilités connues
| CVE | Titre | Versions concernées | CVSS | Exploitée | EPSS | Publication |
|---|---|---|---|---|---|---|
| CVE-2026-113597 | Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures | ≤ 1.8.8 | 5.3 | — | 2026-10-21 | |
| CVE-2026-110774 | Blinko through 1.8.8 Private Attachment Read via /api/file Route | ≤ 1.8.8 | 6.0 | — | 2026-10-15 | |
| CVE-2026-85624 | Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList | ≤ 1.8.8 | 7.1 | — | 2026-09-04 | |
| CVE-2026-85607 | Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router | ≤ 1.8.8 | 8.7 | — | 2026-09-04 | |
| CVE-2026-23882 | Blinko: Admin RCE - MCP Server Command Injection | * | 8.6 | — | 2026-03-24 | |
| CVE-2026-23485 | Blinko: Unauthorized Path Traversal File Enumeration - music-metadata | * | 6.9 | — | 2026-03-24 | |
| CVE-2026-23488 | Blinko: multiple interfaces in the comment feature allow unauthorized access | * | 6.9 | — | 2026-03-24 | |
| CVE-2026-23487 | Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token | * | 6.0 | — | 2026-03-24 | |
| CVE-2026-23486 | Blinko: Unauthorized User Information Leak | * | 6.9 | — | 2026-03-24 | |
| CVE-2026-23480 | Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint | * | 5.3 | — | 2026-03-24 | |
| CVE-2026-23481 | Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile | * | 5.3 | — | 2026-03-24 | |
| CVE-2026-23484 | Blinko: Authenticated Arbitrary File Write - saveDevPlugin | * | 5.3 | — | 2026-03-24 | |
| CVE-2026-23483 | Blinko: Unauthorized Arbitrary File Read - /plugins | * | 6.9 | — | 2026-03-24 | |
| CVE-2026-23482 | Blinko: Unauthorized Arbitrary File Read - /api/file/temp | * | 8.2 | — | 2026-03-24 |
Suivez ces versions sur vos propres serveurs
InfraGuard collecte les versions logicielles installées sur chaque serveur et signale celles qui présentent des vulnérabilités connues. Auto-hébergé : rien ne quitte votre réseau.
Données : CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (voir EPSS sur https://www.first.org/epss), endoflife.date. Liste des logiciels : awesome-selfhosted (CC BY-SA 3.0).