What’s Vulnerable › Products

blueprintue-self-hosted-edition vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your blueprintue-self-hosted-edition version is affected

Latest blueprintue-self-hosted-edition vulnerabilities

• CVE-2026-40588 — blueprintUE: Authenticated Password Change Does Not Verify Current Password (CVSS 8.1)
• CVE-2026-40587 — blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset (CVSS 6.5)
• CVE-2026-40586 — blueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force Protection (CVSS 7.5)
• CVE-2026-40585 — blueprintUE: Password Reset Tokens Have No Expiry Window (CVSS 7.4)