Mereithhh vulnerabilities

Products

• vanblog 1

Latest Mereithhh CVEs

Newest publication first

1. CVE-2026-125376 VanBlog through 0.54.0 Private Article Disclosure via Public Password Endpoint

   Published 2026-11-09

   Medium·CVSS 6.9 EPSS 0.30%

   VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles lacking an effective p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.