b3log CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM b3log CVE published 2026-10-16

CVE-2026-111610

B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author ownership checks. This vulnerability can lead to unauthorized access and modification of content. The affected product is B3log Solo, and the vulnerability class is missing authorization. The likely operational impact is that a [truncated]