CVE-2026-6579

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing authentication. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-287CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Apr 19, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-657907.8Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.CVE-2026-657919.8Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.CVE-2026-657946.5Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.CVE-2026-657956.7Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.CVE-2026-657968.1Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.CVE-2026-657976.7Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.CVE-2026-657986.7Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.CVE-2026-657997.8Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.CVE-2026-65807.3A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/vCVE-2026-6580110.0Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.CVE-2026-658027.4External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.CVE-2026-658046.1Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoo
CVE-2026-6579: Medium severity, CVSS 6.5 | Vulnix