Advisories · Technology

Z-BlogPHP.

Every CVE that names Z-BlogPHP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8747 CVE record

CVSS 5.3 Medium

Z-BlogPHP Commend Approval c_system_event.php CheckComment improper authorization
- Z-BlogPHP
- Privilege escalation
- Broken access control
Not analysed yet 17 May 2026
CVE-2026-6650 CVE record

CVSS 5.1 Medium

Z-BlogPHP ZBA File app_upload.php UnPack unrestricted upload
- Z-BlogPHP
- Broken access control
- Unrestricted file upload
Not analysed yet 20 Apr 2026