Critical · 10.0 CVE-2025-12216 EUVD-2025-35936GHSA-6v8w-33wg-8gw2

Malicious / Malformed App can be Installed but not Uninstalled

Published Oct 25, 2025 · Updated Oct 28, 2025 · Assigned by azure-access

Vendor: Azure Access Technology Product: BLU-IC2 Product: BLU-IC4

Description

Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Affected products

Vendor	Product	Affected	Fixed
Azure Access Technology	BLU-IC2	≤ 1.19.5	—
Azure Access Technology	BLU-IC4	≤ 1.19.5	—

References

https://azure-access.com/security-advisories