Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Bluspark Global Component: Bluvoyix Clear all filters
TI-2026-17850 CVE-2026-22240 · GHSA-vj77-c9m5-qqrc

Plaintext Passwords Vulnerability in BLUVOYIX

Priority MEDIUM 55

The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03411 Published 2026-01-14 No fix listed CWE-200
TI-2026-17849 CVE-2026-22239 · GHSA-v9rm-r464-44x6

Email Sending Vulnerability in BLUVOYIX

Priority MEDIUM 49

The vulnerability exists in BLUVOYIX due to design flaws in the email sending API.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00318 Published 2026-01-14 No fix listed CWE-400
TI-2026-17848 CVE-2026-22238 · GHSA-74ww-529h-q25p

Administrator Account Creation Vulnerability in BLUVOYIX

Priority MEDIUM 50

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00748 Published 2026-01-14 No fix listed CWE-269
TI-2026-17846 CVE-2026-22236 · GHSA-fp5g-rgjq-c9mx

Improper Authentication Vulnerability in BLUVOYIX

Priority MEDIUM 50

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00534 Published 2026-01-14 No fix listed CWE-287