CVE-2026-109177
Received Received - Intake

Broken Access Control in MoguBlog

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulnCheck

Description
MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-disk files by supplying their file paths. Attackers can send crafted requests to POST /networkDisk/moveFile, batchMoveFile, or edit, which update rows without admin_uid checks, relocating or renaming other users' files and folders.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-109177
EUVD
EUVD-2026-97381

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
moxi624 MoguBlog 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-109177 is an Insecure Direct Object Reference (IDOR) vulnerability in MoguBlog through version 6.2. It allows authenticated administrators to move or rename files owned by other administrators without proper authorization checks. The flaw exists in endpoints like /networkDisk/moveFile, batchMoveFile, or edit, which fail to verify file ownership before performing actions. Attackers can exploit this by sending crafted requests to manipulate files belonging to other users.

Detection Guidance

To detect this vulnerability, check if authenticated administrators can move or rename files belonging to other administrators without proper authorization. Review logs for POST requests to /networkDisk/moveFile, batchMoveFile, or edit endpoints. Look for requests where admin_uid is not validated in the t_network_disk table operations.

Impact Analysis

This vulnerability can lead to unauthorized file manipulation, including moving, renaming, or deleting files owned by other administrators. Attackers with valid sessions can cause data loss, disrupt operations, or escalate privileges by modifying files they do not own. The impact includes potential disruption of services, loss of critical data, and compromise of user trust.

Compliance Impact

This vulnerability may violate compliance requirements such as GDPR and HIPAA, which mandate strict access controls and protection of sensitive data. Unauthorized file manipulation could lead to unauthorized access to personal or health information, resulting in legal penalties, reputational damage, and loss of certification for organizations handling regulated data.

Mitigation Strategies

Immediately update MoguBlog to the latest version if available. Implement admin_uid validation in all /networkDisk endpoints. Restrict access to these endpoints to only necessary administrators. Review and remove any permitAll configurations for these routes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-109177. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart