CVE-2026-22239 - Email Sending Vulnerability in BLUVOYIX · CoreCVE

Back Back to CVE browser

CRITICAL

Email Sending Vulnerability in BLUVOYIX

Published Jan 14, 2026

10.0

CRITICAL

CVSS 4.0

EPSS 0.32%

Description

The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable email sending API. Successful exploitation of this vulnerability could allow the attacker to send unsolicited emails to anyone on behalf of the company.

Affected products

Vendor Bluspark Global Product Bluvoyix Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bluspark Global

unaffected

Version	Status	Constraints
0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (1)

https://blusparkglobal.com/bluvoyix/
Product

Link	Providers	Tags
https://blusparkglobal.com/bluvoyix/		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner MHV

Published Jan 14, 2026

Updated Jan 14, 2026

Reserved Jan 6, 2026

Link CVE-2026-22239

CISA Vulnrichment

Updated Jan 14, 2026

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-22239

Severity n/a

Public date n/a

Links CVE-2026-22239