VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 23, 2026· Updated Jun 17, 2026

CVE-2026-23487

CVE-2026-23487

Description

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an IDOR vulnerability where user.detail Endpoint Leaks the Superadmin Token. This issue has been patched in version 1.8.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Blinko/Blinko
    cpe:2.3:a:blinko:blinko:*:*:*:*:*:*:*:*
    Range: <1.8.4
  • Blinkospace/blinkollm-fuzzy2 versions
    <1.8.4+ 1 more
    • (no CPE)range: <1.8.4
    • (no CPE)range: < 1.8.4

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.