← Database

CVE-2026-126659

HIGH CVSS: 7.5 Published: 2026-11-11 Modified: 2026-11-11

Description

BlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 contains a resource exhaustion vulnerability that allows unauthenticated attackers to fill server storage by repeatedly creating anonymous blueprints. Attackers can send large requests to HomeController::doProcessCreateBlueprint() with a 'never' expiration, bypassing purges to fill the disk and deny service.

Affected Platforms

Unknown

Weakness Type

CWE-770

References