Blusparkglobal Bluvoyix — known CVE vulnerabilities

Every CVE whose affected-product data names Blusparkglobal Bluvoyix, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2026-22236 — CVSS 9.8 (critical): The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could…
• CVE-2026-22237 — CVSS 9.8 (critical): The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation. An unauthenticated remote attacker could…
• CVE-2026-22238 — CVSS 9.8 (critical): The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could…
• CVE-2026-22240 — CVSS 7.5 (high): The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs…
• CVE-2026-22239 — CVSS 5.3 (medium): The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker could exploit this…