Skip to content
OpenAdvisories

Vendor

blueprintue

10 known vulnerabilities.

Products

blueprintue-self-hosted-edition 10
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-126812

    blueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker Compose

    blueprintUE Self-Hosted Edition before 4.3.7 contains an insecure default configuration in its Docker Compose examples that sets MYSQL_ALLOW_EMPTY_PASSWORD=yes in database.env and publishes MariaDB on port 3306. Unauthenticated attackers reaching the Docker h…

    blueprintue blueprintue-self-hosted-edition