CVE-2022-21142: Appleple A-Blog CMS

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41 allows a remote unauthenticated attacker to bypass authentication under the specific condition.

Affected products

• Appleple A-Blog CMS: from 2.8.0, before 2.8.74 (fixed in 2.8.74); from 2.9.0, before 2.9.39 (fixed in 2.9.39); from 2.10.0, before 2.10.43 (fixed in 2.10.43); from 2.11.0, before 2.11.41 (fixed in 2.11.41)

Published 2022-02-24. Last modified 2026-06-17.