CVE-2026-23487— Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-23487
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token
Source: NVD (National Vulnerability Database)
Vulnerability Description
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an IDOR vulnerability where user.detail Endpoint Leaks the Superadmin Token. This issue has been patched in version 1.8.4.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: NVD (National Vulnerability Database)
Vulnerability Title
Blinko 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Blinko是Blinko开源的一款基于人工智能的卡片式笔记应用，专为想要快速捕捉和整理转瞬即逝的灵感的用户而设计。 Blinko 1.8.4之前版本存在安全漏洞，该漏洞源于user.detail端点存在不安全的直接对象引用漏洞，泄露超级管理员令牌。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| blinkospace | blinko | < 1.8.4 | - |
II. Public POCs for CVE-2026-23487
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-23487
请登录查看更多情报信息。
- Release Blinko 1.8.4 · blinkospace/blinko · GitHubx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2026-23487
Same Patch Batch · blinkospace · 2026-03-23 · 10 CVEs total
| CVE-2026-23481 | Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile | |
| CVE-2026-23484 | Blinko: Authenticated Arbitrary File Write - saveDevPlugin | |
| CVE-2026-23480 | Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint | |
| CVE-2026-23483 | Blinko: Unauthorized Arbitrary File Read - /plugins | |
| CVE-2026-23482 | Blinko: Unauthorized Arbitrary File Read - /api/file/temp | |
| CVE-2026-23488 | Blinko: multiple interfaces in the comment feature allow unauthorized access | |
| CVE-2026-23486 | Blinko: Unauthorized User Information Leak | |
| CVE-2026-23485 | Blinko: Unauthorized Path Traversal File Enumeration - music-metadata | |
| CVE-2026-23882 | Blinko: Admin RCE - MCP Server Command Injection |
IV. Related Vulnerabilities
Same product: blinko
- CVE-2026-23882
Blinko: Admin RCE - MCP Server Command Injection - CVE-2026-23485
Blinko: Unauthorized Path Traversal File Enumeration - music - CVE-2026-23488
Blinko: multiple interfaces in the comment feature allow una - CVE-2026-23486
Blinko: Unauthorized User Information Leak - CVE-2026-23480
Blinko: Low Privilege User Privilege Escalation - upsertUser
Same vendor: blinkospace
- CVE-2026-23882
Blinko: Admin RCE - MCP Server Command Injection - CVE-2026-23485
Blinko: Unauthorized Path Traversal File Enumeration - music - CVE-2026-23488
Blinko: multiple interfaces in the comment feature allow una - CVE-2026-23486
Blinko: Unauthorized User Information Leak - CVE-2026-23480
Blinko: Low Privilege User Privilege Escalation - upsertUser
Same weakness: CWE-639
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-42291
SysReptor: Read-write access to personal notes by sharing-li - CVE-2026-44400
MailEnable Enterprise Premium < 10.55 Authorization Bypass v - CVE-2026-42279
solidtime: Time entry update endpoint allows cross-organizat - CVE-2026-42277
Onyx: IDOR in /chat/file/{file_id} allows any authenticated
V. Comments for CVE-2026-23487
No comments yet