Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Hallo Welt! BlueSpice — en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSS… Clear all filters
TI-2026-79597 CVE-2026-25784 · GHSA-xrr7-cjx6-x9j2

Insecure default token auth in BlueSpice wiki enables sysop access

Priority MEDIUM 48

Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00345 Published 2026-10-23 Fixed in 5.2.7 CWE-1188
TI-2026-79596 CVE-2026-25716 · GHSA-vr6v-xrj8-f9m9

Missing authorization in BlueSpiceUserManager lets users block accounts

Priority LOW 30

Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without special privileges to block or unblock arbitrary user accounts, including administr…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00183 Published 2026-10-23 Fixed in 5.1.11, 5.2.7 CWE-862