unblu_spark vulnerabilities
CVEs whose affected-version data names the unblu_spark package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-14933High· 8.6Unblu Spark Cross-Site Scripting in Embedded Co-Browsing
Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.39.2, on on-premises and cloud deployments, allows an unauthenticated remote attacker in the visitor role to execute …
▾ TwilightUnblu inc. · Unblu Sparkvia CVEORG
CVE-2026-9589Critical· 9.3Unblu Spark Authorization Bypass in Configuration Cascade Operations
Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0, on on-premises and cloud deployments, allows an authenticated remote attacker to read and ch…
▾ MidnightUnblu inc. · Unblu Sparkvia CVEORG