Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Critical | 9.3 | CVE-2026-25784 |
Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation
Hallo Welt! GmbHHallo Welt! GmbH BlueSpice, Hallo Welt! GmbH bluespice/wiki, Hallo Welt! GmbH Extension:BlueSpiceUserManager, Hallo Welt! GmbH bluespice/formula, Hallo Welt! GmbH bluespice/search
|
NVD | |||
|
CVE-2026-25784Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation
Executive summaryThe advisory covers several flaws in Hallo Welt! BlueSpice, a wiki platform distributed as container images. The most serious flaw (CVE-2026-25784, rated Critical with CVSS 4.0 score 9.3) lets a user who can read the wiki gain administrator rights through an insecure default configuration. The vendor recommends updating to BlueSpice 5.2.7, which fixes all critical and high rated issues in the advisory, and checking installations for signs of misuse. Technical summaryCVE-2026-25784 is an insecure default configuration (CWE-1188) in the bluespice/wiki container, where an internal authentication mechanism for services is reachable outside the internal container network, letting any user who can read the wiki obtain sysop privileges via the REST API; anonymous users on wikis with anonymous read access are also included. The advisory says the issue may date from BlueSpice 5.2.3, and affected versions are listed as 5.2.3 to 5.2.6 and 5.2.7 images published before 2026-10-19 15:37 UTC. Fixed version is BlueSpice 5.2.7, with images re-published on 2026-10-19. CVE-2026-25716 (High, CVSS 4.0 7.1) is missing authorization (CWE-862) on user block and unblock endpoints in BlueSpiceUserManager, affecting 5.0.0 to 5.1.10 and 5.2.0 to 5.2.6, fixed in 5.1.11 and 5.2.7. Mitigations are stated for both issues: setting WIKI_SERVICE_TOKEN_AUTH_ALLOWED to the internal network range or blocking the /rest.php/mws/v1/app-token/generate path for the first, and blocking the bs-usermanager block paths for the second. Detection guidance includes reviewing access logs, Special:Log, ChatBot service user actions, and the block log. The advisory does not state a CVSS score for the three remaining CVEs beyond their assessed low rating, and it does not state exploitation in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from en.wiki.bluespice.com/wiki/Security:Sec…isories/BSSA-2026-07 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X AffectsHallo Welt! GmbHHallo Welt! GmbH BlueSpiceHallo Welt! GmbH bluespice/wikiHallo Welt! GmbH Extension:BlueSpiceUserManagerHallo Welt! GmbH bluespice/formulaHallo Welt! GmbH bluespice/search
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||