What is CVE-2026-22236?

CVE-2026-22236 is a critical-severity vulnerability in Bluspark Global Bluvoyix, classified under Improper Authentication. CVSS score: 9.8/10. Published 2026-01-14.

How severe is CVE-2026-22236?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Bluspark Global Bluvoyix

CVE-2026-22236

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Succes…

Vulnerability class: Broken Authentication

EPSS: 0.005 (37.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Bluspark Global Bluvoyix — versions 0
Blusparkglobal Bluvoyix

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

56a186b1-7f5e-4314-ba38-38d5499fccfd (Product)

Frequently asked questions

What is CVE-2026-22236?: CVE-2026-22236 is a critical-severity vulnerability in Bluspark Global Bluvoyix, classified under Improper Authentication. CVSS score: 9.8/10. Published 2026-01-14.
How severe is CVE-2026-22236?: Critical severity. CVSS v3 base score is 9.8 out of 10.