blueprintue vulnerabilities
7 published CVEs name blueprintue among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-122139
blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset
blueprintue · blueprintue-self-hosted-edition
Medium6.9 - CVE-2026-122138
BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypass
blueprintue · blueprintue-self-hosted-edition
Medium6.3 - CVE-2026-121735
blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens
blueprintue · blueprintue-self-hosted-edition
Medium6.3 - CVE-2026-40588
blueprintUE: Authenticated Password Change Does Not Verify Current Password
blueprintue · blueprintue-self-hosted-edition
High8.1 - CVE-2026-40587
blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset
blueprintue · blueprintue-self-hosted-edition
Medium6.5 - CVE-2026-40586
blueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force Protection
blueprintue · blueprintue-self-hosted-edition
High7.5 - CVE-2026-40585
blueprintUE: Password Reset Tokens Have No Expiry Window
blueprintue · blueprintue-self-hosted-edition
High7.4