What’s Vulnerable › Products

Unblu inc. Unblu Spark vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Unblu inc. Unblu Spark version is affected

Latest Unblu inc. Unblu Spark vulnerabilities

• CVE-2026-14933 — Unblu Spark Cross-Site Scripting in Embedded Co-Browsing (CVSS 8.6)
• CVE-2026-9589 — Unblu Spark Authorization Bypass in Configuration Cascade Operations (CVSS 9.3)
• CVE-2026-8152 — Unblu Spark Open Redirect leading to DOM-Based XSS (CVSS 9.3)
• CVE-2025-3519 — Replace uploaded files knowing the file upload ID (CVSS 7.0)
• CVE-2025-3518 — File upload functionality possible even when disabled (CVSS 4.3)