BL
Product
BlueSpice
3
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add BlueSpice to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25784 New | 9.8 | Oct 23 | bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop Affected: 5.2.3 before 5.2.7 |
| CVE-2026-25716 New | 7.1 | Oct 23 | BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users Affected: 5.0.0 before 5.1.11; 5.2.0 before 5.2.7 |
| CVE-2026-24732 | 6.6 | Mar 4 | Improper permission checks in Extension:NSFileRepo Affected: 5.1 through 5.1.3; 5.2 through 5.2.0 |
Showing 3