[ Vendor · 3 CVEs ]
mlogclub
CVEs affecting mlogclub published in the last 30 days, plus any mlogclub CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111639 | 16 Oct 2026 | CVSS 8.1 | mlogclub bbs-gobbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers to log in… | |
| CVE-2026-110103 | 13 Oct 2026 | CVSS 5.4 | mlogclub bbs-gobbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the… | |
| CVE-2026-103396 | 30 Sep 2026 | CVSS 4.3 | mlogclub bbs-gobbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization logic where the read-only dashboard.user.view… |