Product by Blueprintue
Blueprintue-self-hosted-edition
7 known vulnerabilities in Blueprintue-self-hosted-edition (Blueprintue), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-122139 | blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset | 5.3 | |
| Medium | CVE-2026-122138 | BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypass | 5.3 | |
| Medium | CVE-2026-121735 | blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens | 3.7 | |
| High | CVE-2026-40586 | blueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force Protection | 7.5 | |
| High | CVE-2026-40588 | blueprintUE: Authenticated Password Change Does Not Verify Current Password | 8.1 | |
| High | CVE-2026-40585 | blueprintUE: Password Reset Tokens Have No Expiry Window | 7.4 | |
| Medium | CVE-2026-40587 | blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset | 6.5 |