AUGUST 25, 2026
Live Feed
Back to database
Case File

CVE-2026-51937

HIGH · CVSS 7.5 EPSS 0.35% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-07 · Last synced 2026-08-06

CyberRota Analysis

AI-Generated

A vulnerability in Oneblog V2.3.9 allows remote attackers to exploit specific components, including RestApiController.java, JsApiTicketComponent.java, and GetAccessTokenComponent.java, to access sensitive information. This high-severity flaw (CVSS 7.5) poses significant risks to data confidentiality. Organizations using this version of Oneblog should prioritize patching to mitigate potential data breaches.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
gist.github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-51937
Severity
HIGH
CVSS
7.5
EPSS
0.35%
Java

Original NVD Description

An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsApiTicketComponent.java, and the GetAccessTokenComponent.java component