PT-2026-2859 · Bluvoyix · Bluvoyix

Eaton Zveare · Publicado 2026-01-14 · Atualizado 2026-01-14 · CVE-2026-22236

Positive Technologies (AI Summary)

CVSS v4.0

10

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions BLUVOYIX (affected versions not specified)

Description The software contains an improper authentication issue in its backend APIs. A remote attacker who does not have valid credentials can exploit this by sending crafted HTTP requests to the vulnerable APIs. Successful exploitation could grant the attacker full access to customer data and complete compromise of the platform.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2026-22236

Produtos afetados

Bluvoyix

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-22236 · Nota de Segurança
• https://blusparkglobal.com/bluvoyix · Nota
• https://twitter.com/0dayPublishing/status/2011459836127449200 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2011555223043801329 · Publicação no Twitter