References https://avd.aliyun.com/detail?id=AVD-2026-23486 https://cve.imfht.com/detail/CVE-2026-23486 https://cve.imfht.com/poc_detail/fa5ddc48dd7c5b82bffb2471e22355133811a2b9 https://nvd.nist.gov/vuln/detail/CVE-2026-23486 https://github.com/blinkospace/blinko/security/advisories/GHSA-446p-2xf5-frxf https://github.com/blinkospace/blinko/releases/tag/1.8.4 https://www.cvedetails.com/cve/CVE-2026-23486/ https://vulners.com/nuclei/NUCLEI:CVE-2026-23486 https://s4e.io/tools/blinko-user-information-leak-cve-2026-23486 https://www.sentinelone.com/vulnerability-database/cve-2026-23486/
Related VulnerabilitiesPoCCVE-2026-23482: Blinko < 1.8.4 - Path TraversalPoCCVE-2026-23483: Blinko <= 1.8.3 - Path Traversal via /pluginsPoCCVE-2026-23486: Blinko <= 1.8.3 - User Information LeakBlinko /plugins 文件读取漏洞(CVE-2026-23483)Blinko /api/file/temp/ 文件读取漏洞(CVE-2026-23482)blinko v1.8.3 路径穿越导致任意文件读取