EUVD-2026-116593

blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmedsentat. Attackers who obtain an old confirmation link from a...

CVE-2026-121735

blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmedsentat. Attackers who obtain an old confirmation link from a...

CVE-2026-121735

The blueprintUE self-hosted edition before version 4.3.4 is vulnerable to an insufficient session expiration vulnerability (CWE-613). The root cause is that the UserModel::findUserIDWithConfirmedToken function ignores the confirmed_sent_at field, allowing for the use of stale confirmation tokens ...

CVE-2026-121735 blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens

blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmedsentat. Attackers who obtain an old confirmation link from a...