CyberSecBulletin

Mlogclub vulnerabilities

We track 1 vulnerability in Mlogclub products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Mlogclub vulnerabilities

  • 8.1 High severity

    bbs-go: Improper Authentication

    CVE-2026-111639Mlogclub

    bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google