What is CVE-2026-22238?

CVE-2026-22238 is a critical-severity vulnerability in Bluspark Global Bluvoyix, classified under Improper Privilege Management. CVSS score: 9.8/10. Published 2026-01-14.

How severe is CVE-2026-22238?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Bluspark Global Bluvoyix

CVE-2026-22238

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to c…

Vulnerability class: Privilege Escalation

EPSS: 0.006 (46.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Bluspark Global Bluvoyix — versions 0
Blusparkglobal Bluvoyix

Weakness classification (CWE)

References

56a186b1-7f5e-4314-ba38-38d5499fccfd (Product)

Frequently asked questions

What is CVE-2026-22238?: CVE-2026-22238 is a critical-severity vulnerability in Bluspark Global Bluvoyix, classified under Improper Privilege Management. CVSS score: 9.8/10. Published 2026-01-14.
How severe is CVE-2026-22238?: Critical severity. CVSS v3 base score is 9.8 out of 10.