CVE-2026-122139

The blueprintUE Self-Hosted Edition version before 4.3.3 is vulnerable to an account enumeration flaw within the ForgotPasswordMiddleware.php component. This vulnerability allows unauthenticated attackers to identify registered email addresses by comparing password reset redirect targets for subm...

EUVD-2026-117093

blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMiddleware.php that allows unauthenticated attackers to identify registered email addresses. Attackers can compare password reset redirect targets for submitted emails, and failed lookups a...

PT-2026-137161

blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMiddleware.php that allows unauthenticated attackers to identify registered email addresses. Attackers can compare password reset redirect targets for submitted emails, and failed lookups a...