EUVD-2026-24181

blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a password reset is initiated, a 128-character CSPRNG token is generated and stored alongside a passwordresetat timestamp. However, the token redemption function findUserIDFromEmailAndToken queries only for a matching...

PT-2026-34022

blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a password reset is initiated, a 128-character CSPRNG token is generated and stored alongside a password reset at timestamp. However, the token redemption function findUserIDFromEmailAndToken queries only for a matching...

PT-2026-34035

blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a user changes their password via the profile edit page, or when a password reset is completed via the reset link, neither operation invalidates existing authenticated sessions for that user. A server-side session store...

PT-2026-34036

blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, the password change form at /profile/slug/edit/ does not include a current password field and does not verify the user's existing password before accepting a new one. Any attacker who obtains a valid authenticated session —...

CVE-2018-10531

An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks...

EUVD-2007-4426

Malware in sbrugna...

EUVD-2007-5230

Malware in sbrugna...

EUVD-2008-6970

Malware in sbrugna...

EUVD-2003-1423

Malware in sbrugna...

EUVD-2008-6974

Malware in sbrugna...

EUVD-2007-5229

Malware in sbrugna...

EUVD-2008-6411

Malware in sbrugna...

EUVD-2018-2603

Malware in sbrugna...

EUVD-2007-4425

Malware in sbrugna...

EUVD-2010-2706

Malware in sbrugna...

EUVD-2003-1421

Malware in sbrugna...

EUVD-2004-1950

Malware in sbrugna...

Malicious code in unreal-engine-material-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5416560cfa4f934e2b9541b688b91c11edd2c04d167c8859641e58697d88ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3202 Malicious code in unreal-engine-material-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5416560cfa4f934e2b9541b688b91c11edd2c04d167c8859641e58697d88ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

answers.unrealengine.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1125430 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...