{"schema":"vulnpedia.research/1","cve":"CVE-2026-109174","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/mogu_blog_v2/poc_oauth_getSystemConfig.py","tags":["exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:35.666Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:35.666Z","url":"https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/mogu_blog_v2/poc_oauth_getSystemConfig.py"},{"source":"nvd","sourceId":"CVE-2026-109174","modified":"2026-10-13T20:41:35.943","url":"https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/mogu_blog_v2/poc_oauth_getSystemConfig.py"}]},{"url":"https://github.com/moxi624/mogu_blog_v2/blob/025d78c7ac7e19b1abf796fa3cc158d855723d15/mogu_web/src/main/java/com/moxi/mogublog/web/restapi/AuthRestApi.java#L490-L502","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:35.666Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:35.666Z","url":"https://github.com/moxi624/mogu_blog_v2/blob/025d78c7ac7e19b1abf796fa3cc158d855723d15/mogu_web/src/main/java/com/moxi/mogublog/web/restapi/AuthRestApi.java#L490-L502"},{"source":"nvd","sourceId":"CVE-2026-109174","modified":"2026-10-13T20:41:35.943","url":"https://github.com/moxi624/mogu_blog_v2/blob/025d78c7ac7e19b1abf796fa3cc158d855723d15/mogu_web/src/main/java/com/moxi/mogublog/web/restapi/AuthRestApi.java#L490-L502"}]},{"url":"https://www.vulncheck.com/advisories/mogublog-through-6.2-credential-disclosure-via-oauth-getsystemconfig","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:35.666Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:35.666Z","url":"https://www.vulncheck.com/advisories/mogublog-through-6.2-credential-disclosure-via-oauth-getsystemconfig"},{"source":"nvd","sourceId":"CVE-2026-109174","modified":"2026-10-13T20:41:35.943","url":"https://www.vulncheck.com/advisories/mogublog-through-6.2-credential-disclosure-via-oauth-getsystemconfig"}]},{"source":"euvd","sourceId":"EUVD-2026-97378","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97378","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-97378","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97378"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}