CVE-2026-87727

appleple inc. / a-blog cms PUBLISHED

Description (CNA)

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product.

Affected (CNA)

Vendor / product	Versions
appleple inc. / a-blog cms	affected 0 through 3.2.33

CWE

CWE-22

References

https://jvn.jp/en/jp/JVN20829034/
https://developer.a-blogcms.jp/blog/news/JVN-20829034.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.