/Vulnerability Library

Blinko <= 1.8.3 - Path Traversal via /plugins

CVE-2026-23483
Verified

Description

Blinko <= 1.8.3 contains a path traversal caused by improper path concatenation without verification in the plugin file server endpoint, letting remote attackers access arbitrary files, exploit requires network access.

Severity

Medium

CVSS Score

5.3

Exploit Probability

1%

Affected Product

blinko

Published Date

April 27, 2026

Template Author

tx1ee

CVE-2026-23483.yaml
5.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE ID:
cve-2026-23483
CWE ID:
cwe-22

References

https://nvd.nist.gov/vuln/detail/CVE-2026-23483https://github.com/blinkospace/blinko/security/advisories/GHSA-54c7-9gxh-fg9v

Remediation Steps

Update to the latest version once available.