https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T23:33:29.053218+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-126812 CVE-2026-126812 — blueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker Compose 2026-11-15T23:33:29.054122+00:00

Affected: blueprintue-self-hosted-edition

blueprintUE Self-Hosted Edition before 4.3.7 contains an insecure default configuration in its Docker Compose examples that sets MYSQL_ALLOW_EMPTY_PASSWORD=yes in database.env and publishes MariaDB on port 3306. Unauthenticated attackers reaching the Docker host on port 3306 can log in as root without a password to read, modify, or delete user accounts, blueprints, and all databases.