Path Traversal Vulnerability in a-blog CMS by a-blog Corporation
CVE-2026-87727

6.9MEDIUM

Key Information:

Vendor

Appleple Inc.

Status
A-blog Cms
Vendor
CVE Published:
11 September 2026

What is CVE-2026-87727?

The a-blog CMS, specifically versions 3.2.33 and earlier, is susceptible to a path traversal vulnerability that permits unauthenticated attackers to access and potentially manipulate sensitive files within the system. Exploiting this vulnerability can lead to unauthorized file reading or deletion, posing a significant threat to user data integrity and privacy.

Affected Version(s)

a-blog cms 0 <= 3.2.33

References

https://jvn.jp/en/jp/JVN20829034/
https://developer.a-blogcms.jp/blog/news/JVN-20829034.html

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.