HuLaSpark
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| HuLa-Server | 3 | – | Oct 30, 2026 |
Exploited and recent CVEs
- CVE-2026-119652 HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure 0.3%
- CVE-2026-119651 HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion 0.3%
- CVE-2026-119650 HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController 0.3%