CyberSecBulletin

Bluspark Global vulnerabilities

We track 4 vulnerabilities in Bluspark Global products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 14, 2026.

4vulnerabilities
3critical
1high
0exploited
9.2average CVSS score

Latest Bluspark Global vulnerabilities

  • 7.5 High severity

    BLUVOYIX: Insufficiently Protected Credentials

    CVE-2026-22240Bluspark GlobalEPSS 3.41%

    The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vuln

  • 9.8 Critical severity

    BLUVOYIX: Improper Privilege Management

    CVE-2026-22238Bluspark Global

    The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to create a new user with

  • 9.8 Critical severity

    BLUVOYIX: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-22237Bluspark Global

    The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the APIs exposed by the documentation. Successfu

  • 9.8 Critical severity

    BLUVOYIX: Improper Authentication

    CVE-2026-22236Bluspark Global

    The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of