Products: 1
Vulnerabilities: 47
Known Exploited: 0
12
Critical Level Threats
9
High Level Threats
24
Medium Level Threats
2
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-116117
halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal
Last Modified: Oct 26, 2026
Published: Oct 26, 2026
CVE-2026-97182
halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization
Last Modified: Sep 24, 2026
Published: Sep 24, 2026
CVE-2026-67921
Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote attacker to execute arbitrary code.
Last Modified: Aug 21, 2026
Published: Aug 18, 2026
CVE-2026-67920
Halo CMS 2.25.4 Arbitrary Code Execution via File Copy in Migration Service
Last Modified: Aug 21, 2026
Published: Aug 18, 2026
CVE-2026-67919
Remote Code Execution via Unvalidated Plugin Installation in Halo
Last Modified: Aug 21, 2026
Published: Aug 17, 2026
Items Per Page
