Report: Ultimate Guide: CVE-2026-23487 - Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token

Report: Ultimate Guide: CVE-2026-23487 - Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token

CVE ID :CVE-2026-23487 Published : March 23, 2026, 9:17 p.m. | 35 minutes ago Description :Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an IDOR vulnerability where user.detail Endpoint Leaks the Superadmin Token. This issue has been patched in version 1.8.4. Severity: 6.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
March 23, 2026