CVE-2026-87727: Appleple Inc A-Blog CMS

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product.

Affected products

• Appleple Inc A-Blog CMS: up to and including 3.2.33

Published 2026-09-11. Last modified 2026-09-16.