PT-2026-2859 · Bluvoyix · Bluvoyix

Eaton Zveare · Published 2026-01-14 · Updated 2026-01-14 · CVE-2026-22236

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions BLUVOYIX (affected versions not specified)

Description The software contains an improper authentication issue in its backend APIs. A remote attacker who does not have valid credentials can exploit this by sending crafted HTTP requests to the vulnerable APIs. Successful exploitation could grant the attacker full access to customer data and complete compromise of the platform.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-22236

Affected Products

Bluvoyix

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-22236 · Security Note
• https://blusparkglobal.com/bluvoyix · Note
• https://twitter.com/0dayPublishing/status/2011459836127449200 · Twitter Post
• https://twitter.com/CVEnew/status/2011555223043801329 · Twitter Post