{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/blueprintue-self-hosted-edition--4.3.7/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:blueprintue:self_hosted_edition:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-126812"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["blueprintUE Self-Hosted Edition (\u003c 4.3.7)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["blueprintUE"],"content_html":"\u003cp\u003eblueprintUE Self-Hosted Edition before version 4.3.7 utilizes insecure default configurations within its provided Docker Compose examples. Specifically, the configuration sets the environment variable MYSQL_ALLOW_EMPTY_PASSWORD to 'yes' and exposes the MariaDB service on port 3306. This misconfiguration allows unauthenticated attackers with network access to the Docker host to connect to the database as the root user without credentials.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in full administrative access to the MariaDB instance. An attacker can read, modify, or delete all stored data, including user accounts, blueprint files, and entire databases, leading to complete compromise of the self-hosted application's data layer.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to blueprintUE Self-Hosted Edition 4.3.7 or later immediately to utilize patched Docker configuration templates.\u003c/li\u003e\n\u003cli\u003eAudit existing Docker Compose deployments for blueprintUE and manually disable the 'MYSQL_ALLOW_EMPTY_PASSWORD' option by setting it to 'no'.\u003c/li\u003e\n\u003cli\u003eRestrict inbound network access to port 3306 on the Docker host to authorized IP addresses only using host-based firewalls or network access control lists.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T22:07:47Z","date_published":"2026-11-11T22:07:47Z","id":"https://feed.craftedsignal.io/briefs/2026-11-blueprintue-insecure-config-cve-2026-126812/","summary":"An insecure default configuration in blueprintUE Self-Hosted Edition before 4.3.7 allows unauthenticated remote attackers to gain root access to the database via exposed and unauthenticated MariaDB ports.","title":"blueprintUE Self-Hosted Edition: Insecure default database configuration (CVE-2026-126812)","url":"https://feed.craftedsignal.io/briefs/2026-11-blueprintue-insecure-config-cve-2026-126812/"}],"language":"en","title":"CraftedSignal Threat Feed - BlueprintUE Self-Hosted Edition (\u003c 4.3.7)","version":"https://jsonfeed.org/version/1.1"}