Hhalo-dev

Products

Exploited and recent CVEs

• CVE-2026-116117 High 7.3 halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal 0.5%
• CVE-2026-97182 High 7.3 halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization 0.4%
• CVE-2026-91772 Medium 6.1 Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter 0.3%
• CVE-2026-16088 Medium 4.7 halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal 0.5%
• CVE-2026-15326 Low 3.8 halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal 0.5%
• CVE-2026-55439 Medium 5.5 Halo: Path Traversal in Backup Download Leads to Arbitrary File Read 0.4%
• CVE-2024-56156 Medium 5.5 Halo Vulnerable to Stored XSS and RCE via File Upload Bypass 0.8%
• CVE-2024-43793 Medium 6.3 Halo's editor has a stored XSS vulnerability 0.3%
• CVE-2024-43792 Medium 6.3 Halo's editor has a stored Cross-Site Scripting vulnerability 0.4%
• CVE-2022-22125 Medium 4.8 Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag 0.9%
• CVE-2022-22124 Medium 5.4 Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image 0.7%
• CVE-2022-22123 Medium 5.4 Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Title 0.7%