What is CVE-2026-22239?

CVE-2026-22239 is a medium-severity vulnerability in Bluspark Global Bluvoyix, classified under Uncontrolled Resource Consumption. CVSS score: 5.3/10. Published 2026-01-14.

How severe is CVE-2026-22239?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Resource exhaustion in Bluspark Global Bluvoyix

CVE-2026-22239

The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable email sending API. Successful exploitation of this vulnerability could allow the attacker to send unsolicited emails to anyone on behalf of the company.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.003 (20.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Bluspark Global Bluvoyix — versions 0
Blusparkglobal Bluvoyix

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

56a186b1-7f5e-4314-ba38-38d5499fccfd (Product)

Frequently asked questions

What is CVE-2026-22239?: CVE-2026-22239 is a medium-severity vulnerability in Bluspark Global Bluvoyix, classified under Uncontrolled Resource Consumption. CVSS score: 5.3/10. Published 2026-01-14.
How severe is CVE-2026-22239?: Medium severity. CVSS v3 base score is 5.3 out of 10.