HuLaSpark HuLa-Server

• CVE-2026-119652 Medium 4.3 HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure 0.3%
• CVE-2026-119651 Medium 5.4 HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion 0.3%
• CVE-2026-119650 Medium 5.4 HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController 0.3%