blueprintue blueprintue-self-hosted-edition

• CVE-2026-122139 Medium 5.3 blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset 0.3%
• CVE-2026-122138 Medium 5.3 BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypass 0.3%
• CVE-2026-121735 Low 3.7 blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens 0.2%
• CVE-2026-40588 High 8.1 blueprintUE: Authenticated Password Change Does Not Verify Current Password 0.3%
• CVE-2026-40587 Medium 6.5 blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset 0.2%
• CVE-2026-40586 High 7.5 blueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force Protection 0.4%
• CVE-2026-40585 High 7.4 blueprintUE: Password Reset Tokens Have No Expiry Window 0.3%