Products: 1
Vulnerabilities: 45
Known Exploited: 0
12
Critical Level Threats
7
High Level Threats
24
Medium Level Threats
2
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-67920
Halo CMS 2.25.4 Arbitrary Code Execution via File Copy in Migration Service
Last Modified: Aug 21, 2026
Published: Aug 18, 2026
CVE-2026-67921
Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote attacker to execute arbitrary code.
Last Modified: Aug 21, 2026
Published: Aug 18, 2026
CVE-2026-67919
Remote Code Execution via Unvalidated Plugin Installation in Halo
Last Modified: Aug 21, 2026
Published: Aug 17, 2026
CVE-2026-16088
halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal
Last Modified: Jul 20, 2026
Published: Jul 18, 2026
CVE-2026-15326
halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal
Last Modified: Jul 10, 2026
Published: Jul 10, 2026
Items Per Page
