Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-11832exploit | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12275 | 10.0 critical | 1.0% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-11925 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12001 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12104 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12176 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12216 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12218 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12219 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12220 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12285 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12363 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12364 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12422 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12423 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
| CVE-2025-12424 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
| CVE-2025-12425 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
| CVE-2025-12476 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
| CVE-2025-12477 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
| CVE-2025-12478 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
| CVE-2025-12479 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
| CVE-2025-12553 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12599 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12600 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12601 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
| CVE-2025-12515 | 10.0 critical | 0.00% | azure-access, blu-ic4_firmware, blu-ic2_firmware | Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
| CVE-2025-12516 | 10.0 critical | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 18 Oct |
27 of 27
Download these 27 as CSV · subscribe to this list.
EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.