https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T03:24:51.336870+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-89263 fkie_cve-2026-89263 2026-10-01T03:24:51.426202+00:00

MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbitrary users. Remote callers can modify the startEmailNotification flag in Redis cache for any user identifier to suppress reply notifications without authorization.

 https://vulnerability.circl.lu/vuln/ghsa-9f43-fmc5-62gf GHSA-9f43-fmc5-62gf 2026-10-01T03:24:51.426328+00:00

MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbitrary users. Remote callers can modify the startEmailNotification flag in Redis cache for any user identifier to suppress reply notifications without authorization.