MEDIUMVulnerability

CVE-2026-87727

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product.

Properties

severity
MEDIUM
score
6.5
cve_id
CVE-2026-87727
signal_observed_at
2026-09-21T19:06:38+00:00
vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
published_at
2026-09-11T09:17:22.237
last_modified
2026-09-16T19:27:25.623

Related Entities (2)

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-87727 — Ninja Signal Threat Intelligence | Ninja Signal