VULNERABILITY INTELLIGENCE

CVE-2026-22239

CVSS score10 CRITICAL
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-01-14
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/RE:H/U:Amber

Description

The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable email sending API. Successful exploitation of this vulnerability could allow the attacker to send unsolicited emails to anyone on behalf of the company.

Weakness classification

  • CWE-400: Uncontrolled Resource Consumption

Primary references