Skip to content
OpenAdvisories

Vendor

blueprintue

10 known vulnerabilities.

Products

blueprintue-self-hosted-edition 10
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-122139

    blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset

    blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMiddleware.php that allows unauthenticated attackers to identify registered email addresses. Attackers can compare password reset redirect targets for …

    blueprintue blueprintue-self-hosted-edition
  • Medium 5.3
    CVE-2026-122138

    BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypass

    BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a login rate limit bypass vulnerability in LoginMiddleware.php that keys failed-login counters on case-sensitive usernames. Unauthenticated attackers can vary username casing against case-insensitive…

    blueprintue blueprintue-self-hosted-edition
  • Medium 6.5
    CVE-2026-40587

    blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset

    blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a user changes their password via the profile edit page, or when a password reset is completed via the reset link, neither operation invalidates existing authenticated sessions for t…

    blueprintue blueprintue-self-hosted-edition