Unblu Inc. Unblu Spark
3 CVEs affecting Unblu Inc. Unblu Spark. Latest disclosed: 2026-07-22. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3518 | Medium | 4.3 | 2025-04-22 | It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled. The file upload functionality can… |
CVE-2026-8152 | | 2026-07-22 | Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) attack. When Unblu Spark is deployed with… | |
CVE-2025-3519 | | 2025-04-22 | An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file. Every uploaded file in Unblu gets assigne… |