Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-12602 | critical | 9.8 | No | /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12600 | critical | 9.8 | No | Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12599 | critical | 9.8 | No | Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12554 | critical | 9.8 | No | Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12553 | critical | 9.8 | No | Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12552 | critical | 9.8 | No | Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12478 | critical | 9.8 | No | Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 2026-10-18 |
| CVE-2025-12477 | critical | 9.8 | No | Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 2026-10-18 |
| CVE-2025-12476 | critical | 9.8 | No | Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 2026-10-18 |
| CVE-2025-64095 | critical | 9.8 | No | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default H... | 2026-10-18 |
| CVE-2025-12424 | critical | 9.8 | No | Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | 2026-10-18 |
| CVE-2025-12422 | critical | 9.8 | No | Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through... | 2026-10-18 |
| CVE-2025-12364 | critical | 9.8 | No | Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12285 | critical | 9.8 | No | Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12275 | critical | 9.8 | No | Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12220 | critical | 9.8 | No | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12219 | critical | 9.8 | No | Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12218 | critical | 9.1 | No | Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12217 | critical | 9.1 | No | SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 2026-10-18 |
| CVE-2025-12176 | critical | 9.8 | No | Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2:... | 2026-10-18 |