CVE-2026-121735 | blueprintUE up to 4.3.3 Session Expiration findUserIDWithConfirmedToken confirmed_sent_at session expiration

November 4, 2026 Yanac

A vulnerability described as problematic has been identified in blueprintUE up to 4.3.3. This impacts the function UserModel::findUserIDWithConfirmedToken of the component Session Expiration. The manipulation of the argument confirmed_sent_at results in session expiration.

This vulnerability is known as CVE-2026-121735. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More