Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N P N L N 2.1 .0026 18.3 —
AFFECTED Product Versions Fixed OBlog 3ca6a45a2fcc81f6086751d8af124658720e8f8f – —
TIMELINE Aug 5 Reserved by VulDB Aug 5 Published (CNA: VulDB) Aug 6 RESCORED — CVE-2026-18968 (ttttonyhe OBlog). CVSS 5.3 → 2.1 (NVD).
A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
| Date | Event | Detail |
|---|---|---|
| August 5, 2026 | Reserved | Reserved by VulDB |
| August 5, 2026 | Published | Published (CNA: VulDB) |
| August 6, 2026 | RESCORED | RESCORED — CVE-2026-18968 (ttttonyhe OBlog). CVSS 5.3 → 2.1 (NVD). |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| ttttonyhe | OBlog | — | 3ca6a45a2fcc81f6086751d8af124658720e8f8f | — |
Authoritative record: CVE-2026-18968 at cve.org
Vendors: ttttonyhe
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-18968 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.