HuLaSpark

Products

ProductCVEsExploitedLatest
HuLa-Server3–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-119652 Medium 4.3 HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure 0.3%
  • CVE-2026-119651 Medium 5.4 HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion 0.3%
  • CVE-2026-119650 Medium 5.4 HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController 0.3%