Oneblog · Oneblog · CVE-2026-51937
**Name of the Vulnerable Software and Affected Versions**
Oneblog version 2.3.9
**Description**
A remote attacker can obtain sensitive information through the `RestApiController.java`, `JsApiTicketComponent.java`, and `GetAccessTokenComponent.java` components.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.