CVE-2026-6577

HighCVSS 7.3/10Last modified Oct 25, 2026

Description

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-287CWE-306

Affected software

VendorProductVersions
liangliangyyDjangoBlog2.1.0

References

Timeline

Published
Apr 19, 2026
Last modified
Oct 25, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-6577010.0Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an CVE-2026-657728.8Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.CVE-2026-657737.8Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-657747.8Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-657757.8Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-657767.0Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-657775.3Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.CVE-2026-657787.0Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.CVE-2026-657797.0Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.CVE-2026-65785.6A security flaw has been discovered in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settinCVE-2026-657807.0Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.CVE-2026-657817.0Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-6577: High severity, CVSS 7.3 | Vulnix