CVE-2026-51937 | THREATINT

Description

An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsApiTicketComponent.java, and the GetAccessTokenComponent.java component

PUBLISHED Reserved 2026-06-08 | Published 2026-07-07 | Updated 2026-07-08 | Assigner mitre

References

github.com/zhangyd-c/OneBlog/issues/43 exploit

developers.weixin.qq.com/...nformation/Get_access_token.html

github.com/zhangyd-c/OneBlog/issues/43

gist.github.com/...words404/2599df955cdb36b36b9551b5b7809114

cve.org (CVE-2026-51937)

nvd.nist.gov (CVE-2026-51937)

Download JSON