Resource exhaustion in Bluspark Global Bluvoyix
CVE-2026-22239
The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable email sending API. Successf…
Vulnerability class: DoS (Denial of Service)
EPSS: 0.003 (19.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Bluspark Global Bluvoyix — versions 0
- Blusparkglobal Bluvoyix
Weakness classification (CWE)
References
- 56a186b1-7f5e-4314-ba38-38d5499fccfd (Product)
Frequently asked questions
- What is CVE-2026-22239?
- CVE-2026-22239 is a medium-severity vulnerability in Bluspark Global Bluvoyix, classified under Uncontrolled Resource Consumption. CVSS score: 5.3/10. Published 2026-01-14.
- How severe is CVE-2026-22239?
- Medium severity. CVSS v3 base score is 5.3 out of 10.