Mindbreeze InSpire Vulnerabilities
This page lists known security vulnerabilities found in Mindbreeze InSpire. The article titles contain the Mindbreeze issue number and, in the case of third-party software, the official CVE number. Information about the affected components, severity level, current status and how to prevent the issue as well as hotfix information if applicable, can be found on the detail pages. You can also use the full text search to find specific vulnerabilities.
If you have found a possible security vulnerability, please contact Mindbreeze InSpire Support at support@mindbreeze.com providing detailed information about the problem found.
Vulnerabilities
ID: MINDBREEZE44491 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: High Status: Final First published: October 12, 2026 CVEs: CVE-2026-62574, CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589
ID: MINDBREEZE44485 Affected Components: Mindbreeze InSpire Severity: 9.1 Critical Status: Final First published: September 9, 2026 CVEs: CVE-2026-18963 Summary A flaw was found in the reset-credentials flow of the keycloak-services component. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.
ID: MINDBREEZE44294 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: 7.8 High Status: Final First published: September 9, 2026 CVEs: CVE-2026-64531 Summary kernel: net: openvswitch: reject oversized nested action attrs Hotfix Information Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS: Mindbreeze InSpire 26.5 HF1 ReleaseMindbreeze InSpire SaaS 26.5 HF1 Release
ID: MINDBREEZE43943 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: 8.7 High Status: Final First published: September 9, 2026
ID: MINDBREEZE43930 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: 7.5 High Status: Final First published: October 12, 2026 CVEs: CVE-2009-2940, CVE-2015-5237, CVE-2024-2057, CVE-2024-34997, CVE-2025-69534, CVE-2026-0846, CVE-2026-0994, CVE-2026-12061, CVE-2026-12072, CVE-2026-12074, CVE-2026-12075, CVE-2026-12243, CVE-2026-54293, CVE-2026-59881, CVE-2026-59884, CVE-2026-59885, CVE-2026-59886, CVE-2026-62388, CVE-2026-63311, CVE-2026-66007, CVE-2026-69243, CVE-2026-69244, CVE-2026-69247, CVE-2026-71852, CVE-2026-71870
ID: MINDBREEZE43916 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: Critical Status: Final First published: October 12, 2026
ID: MINDBREEZE43608 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: Critical Status: Final First published: October 12, 2026
ID: MINDBREEZE43606 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: 6.9 Medium Status: Final First published: September 9, 2026 CVEs: CVE-2026-50219, CVE-2026-56131, CVE-2026-56132, CVE-2026-56403, CVE-2026-56404, CVE-2026-56405, CVE-2026-56406, CVE-2026-56407, CVE-2026-56408, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411, CVE-2026-56412
ID: MINDBREEZE43567 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: High Status: Final First published: September 9, 2026 CVEs: DSA-2026-224, DSA-2026-312 Summary Security Update for Dell PowerEdge Server for a Trusted Platform Module (TPM) 2.0 Firmware Vulnerability (CVE-2026-6923) Security Update for Dell iDRAC9 Vulnerabilities (CVE-2022-43680 CVE-2023-52425 CVE-2023-52426 CVE-2024-28757 CVE-2026-25210 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2025-60876)
ID: MINDBREEZE43566 Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS Severity: 7.5 High Status: Final First published: September 9, 2026 CVEs: CVE-2024-42516, CVE-2026-29169, CVE-2026-44631, CVE-2026-44186, CVE-2026-44185, CVE-2026-43951, CVE-2026-42536, CVE-2026-34356, CVE-2026-34355