{"metadata": {"vulnerability": "CVE-2026-109176", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-109176", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T12:42:05.519Z", "date_only": false, "value": "2026-10-12T12:42:05.519Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109176", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T13:10:37.009Z", "date_only": false, "value": "2026-10-12T13:10:37.009Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109176", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T13:10:37.009Z", "date_only": false, "value": "2026-10-12T13:10:37.009Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109176", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-12T13:10:37.009Z", "date_only": false, "value": "2026-10-12T13:10:37.009Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-109176", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T13:17:30Z", "date_only": false, "value": "2026-10-12T13:17:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-926C-Q529-62WH", "record": "GHSA-926C-Q529-62WH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T13:17:30.340Z", "date_only": false, "value": "2026-10-12T13:17:30.340", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109176", "record": "FKIE_CVE-2026-109176", "field": "published"}, {"timestamp": "2026-10-12T13:23:41.725Z", "date_only": false, "value": "2026-10-12T13:23:41.725531Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117428153302671746", "record": "CVE-2026-109176", "field": "creation_timestamp", "uuid": "767b0020-15e4-4d33-8555-8476529a45ee", "content": "CVE-2026-109176 MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other administrators' files via POST /networkDisk/deleteFile and batchDeleteFile. Attackers can supply another administrator's file or folder uid, which NetworkDiskServiceImpl.deleteFile never checks against admin_uid, removing stored objects from local storage, Qiniu or MinIO.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109176https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/mogu_blog_v2/poc_networkDisk_ownership.pyhttps://github.com/moxi624/mogu_blog_v2/blob/025d78c7ac7e19b1abf796fa3cc158d855723d15/mogu_picture/src/main/java/com/moxi/mogublog/picture/restapi/NetworkDiskRestApi.java#L97-L120https://github.com/moxi624/mogu_blog_v2/blob/025d78c7ac7e19b1abf796fa3cc158d855723d15/mogu_picture/src/main/java/com/moxi/mogublog/picture/service/impl/NetworkDiskServiceImpl.java#L134-L231https://www.vulncheck.com/advisories/mogublog-through-6.2-idor-allows-deleting-other-administrators-network-disk-files#moxi624 #MoguBlog#CVE_2026_109176#bot", "url": "https://infosec.exchange/users/cve/statuses/117428153302671746"}, {"timestamp": "2026-10-12T15:32:14Z", "date_only": false, "value": "2026-10-12T15:32:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-926C-Q529-62WH", "record": "GHSA-926C-Q529-62WH", "field": "published"}, {"timestamp": "2026-10-12T15:32:14Z", "date_only": false, "value": "2026-10-12T15:32:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-926C-Q529-62WH", "record": "GHSA-926C-Q529-62WH", "field": "modified"}, {"timestamp": "2026-10-13T20:41:35.943Z", "date_only": false, "value": "2026-10-13T20:41:35.943", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109176", "record": "FKIE_CVE-2026-109176", "field": "lastModified"}]}