← CVEs and Advisories

CVE-2026-40586

blueprintue/blueprintue-self-hosted-edition · Severity High (CVSS 7.5) · Discovered by Pavan Nallamothu

The login endpoint enforced no rate limiting or lockout, permitting unlimited credential-guessing attempts.

Summary

Missing brute-force protection on login.

References

cve.org record · GitHub Security Advisory GHSA-m6c2-6p3h-8jv2