← CVE Radar
CVE-2026-122139blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset
blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMiddleware.php that allows unauthenticated attackers to identify registered email addresses. Attackers can compare password reset redirect targets for submitted emails, and failed lookups are never rate-limited, enabling unlimited enumeration attempts.
6.9 MEDIUMEPSS 0.34%Not in KEVNVD: Received
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.9 | MEDIUM | 4.0VulnCheck (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
| 5.3 | MEDIUM | 3.1VulnCheck (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Details
- CVE ID
- CVE-2026-122139
- Status
- Received
- Assigner (CNA)
- VulnCheck
- Published
- Nov 4, 2026
- Last modified
- 2026-11-04 21:18 UTC
- Weaknesses
- CWE-204 · Observable Response Discrepancy
Affected Products
As published by the CNA in the CVE record.
blueprintueblueprintue-self-hosted-edition1 version range
- before 4.3.3
References
- github.com https://github.com/blueprintue/blueprintue-self-hosted-edition/blob/v4.3.2/app/middlewares/ForgotPasswordMiddleware.php#L130-L157
- github.com https://github.com/blueprintue/blueprintue-self-hosted-edition/commit/45832742182a6c4438a0d58de95ba9c7686851f2
- github.com https://github.com/blueprintue/blueprintue-self-hosted-edition/pull/265
- github.com https://github.com/blueprintue/blueprintue-self-hosted-edition/releases/tag/v4.3.3
- github.com https://github.com/blueprintue/blueprintue-self-hosted-edition/security/advisories/GHSA-fwgq-c3c6-p67j
- vulncheck.com https://www.vulncheck.com/advisories/blueprintue-self-hosted-edition-before-4.3.3-account-enumeration-via-password-reset