Medium severity5.3NVD Advisory· Published Jan 14, 2026· Updated Jun 17, 2026
CVE-2026-22239
CVE-2026-22239
Description
The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable email sending API. Successful exploitation of this vulnerability could allow the attacker to send unsolicited emails to anyone on behalf of the company.
Affected products
4cpe:2.3:a:blusparkglobal:bluvoyix:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:blusparkglobal:bluvoyix:-:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- blusparkglobal.com/bluvoyix/nvdProduct
News mentions
0No linked articles in our index yet.