Advisories · Technology

mlogclub bbs-go.

Every CVE that names mlogclub bbs-go among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121452 CVE record

CVSS 8.3 High

bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service
- mlogclub bbs-go
- Weak cryptography or TLS
Not analysed yet 3 Nov 2026
CVE-2026-111639 CVE record

CVSS 8.6 High

bbs-go through 4.4.6 Account Takeover via Google One Tap Login
- mlogclub bbs-go
- Authentication bypass
Not analysed yet 16 Oct 2026
CVE-2026-110103 CVE record

CVSS 5.1 Medium

bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type
- mlogclub bbs-go
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-103396 CVE record

CVSS 5.3 Medium

bbs-go through 4.4.6 Incorrect Authorization via /api/admin/user/synccount
- mlogclub bbs-go
- Broken access control
Not analysed yet 30 Sept 2026