Unblu inc. Unblu Spark

• CVE-2026-14933 High 8.6 Unblu Spark Cross-Site Scripting in Embedded Co-Browsing 0.6%
• CVE-2026-9589 Critical 9.3 Unblu Spark Authorization Bypass in Configuration Cascade Operations 0.4%
• CVE-2026-8152 Critical 9.3 Unblu Spark Open Redirect leading to DOM-Based XSS 0.4%
• CVE-2025-3519 High 7.0 Replace uploaded files knowing the file upload ID 0.3%
• CVE-2025-3518 Medium 5.3 File upload functionality possible even when disabled 0.2%