cvedb.io
CVE-2026-22236
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2026-01-14T15:16:04.580 · Last modified 2026-06-17T10:19:36.520

Summary

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of this vulnerability could allow the attacker to gain full access to customers' data and completely compromise the targeted platform.

Affected products

blusparkglobal — bluvoyix

Does this affect you?

Add your gear to cvedb and we'll alert you only when blusparkglobal ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.