MEDIUM
liangliangyy
CVE published 2026-04-19
CVE-2026-6580
CVE-2026-6580 is a security vulnerability detected in liangliangyy DjangoBlog up to 2.1.0.0, specifically in the Amap API Call Handler within the owntracks/views.py file. The vulnerability involves the use of a hard-coded cryptographic key due to manipulation of the 'key' argument. This issue can be exploited remotely, and the exploit has been publicly disclosed. The vendor, Unknown Vendor, was contacted [truncated]