CVE-2026-25716 | Hallo Welt! BlueSpice up to 5.1.10/5.2.6 UserManager create unblockUser improper authorization (EUVD-2026-108651)

October 23, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Hallo Welt! BlueSpice up to 5.1.10/5.2.6. The affected element is the function UserManager::blockUser/UserManager::unblockUser of the file /bs-usermanager/v1/block/create of the component UserManager. This manipulation causes improper authorization.

The identification of this vulnerability is CVE-2026-25716. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More