Bluspark Global

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bluspark Global records in CISA KEV

No Bluspark Global vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2026-17850 CVE-2026-22240 · GHSA-vj77-c9m5-qqrc

MEDIUM 55

The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03411 Published 2026-01-14 No fix listed CWE-200

TI-2026-17848 CVE-2026-22238 · GHSA-74ww-529h-q25p

MEDIUM 50

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00748 Published 2026-01-14 No fix listed CWE-269

TI-2026-17846 CVE-2026-22236 · GHSA-fp5g-rgjq-c9mx

MEDIUM 50

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00534 Published 2026-01-14 No fix listed CWE-287

TI-2026-17849 CVE-2026-22239 · GHSA-v9rm-r464-44x6

MEDIUM 49

The vulnerability exists in BLUVOYIX due to design flaws in the email sending API.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00318 Published 2026-01-14 No fix listed CWE-400

TI-2026-17847 CVE-2026-22237 · GHSA-8f29-w8wm-r679

MEDIUM 49

The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0048 Published 2026-01-14 No fix listed CWE-200