PT-2026-61047 · Pypi · Django-Blog-Zinnia

Galaxynx · CVE-2026-16213 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions django-blog-zinnia versions prior to 0.21

Description A security flaw in the Protected Entry Password Handler component, specifically within the zinnia/views/mixins/entry protection.py file, leads to the cleartext storage of sensitive information. This issue requires local access to be exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-310

CWE-312

Related Identifiers

CVE-2026-16213

Affected Products

Django-Blog-Zinnia

References · 8

• 🔥 https://github.com/Fantomas42/django-blog-zinnia/issues/595 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-16213 · Security Note
• https://vuldb.com/submit/857944 · Note
• https://github.com/Fantomas42/django-blog-zinnia · Note
• https://vuldb.com/vuln/380029/cti · Note
• https://twitter.com/VulmonFeeds/status/2078720394505212160 · Twitter Post
• https://vuldb.com/vuln/380029 · Note
• https://vuldb.com/cve/CVE-2026-16213 · Note