Unblu inc.

Products

ProductCVEsExploitedLatest
Unblu Spark5–Oct 20, 2026

Exploited and recent CVEs

  • CVE-2026-14933 High 8.6 Unblu Spark Cross-Site Scripting in Embedded Co-Browsing 0.6%
  • CVE-2026-9589 Critical 9.3 Unblu Spark Authorization Bypass in Configuration Cascade Operations 0.4%
  • CVE-2026-8152 Critical 9.3 Unblu Spark Open Redirect leading to DOM-Based XSS 0.4%
  • CVE-2025-3519 High 7.0 Replace uploaded files knowing the file upload ID 0.3%
  • CVE-2025-3518 Medium 5.3 File upload functionality possible even when disabled 0.2%