CVE-2025-28103: Dogukanurker Flaskblog

Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.

Affected products

• Dogukanurker Flaskblog: version 2.6.1 only

Published 2025-04-21. Last modified 2026-06-17.