Log in Start free

hcengineering

Products

ProductCVEsExploitedLatest
Huly Platform5–Oct 16, 2026
platform2–Sep 14, 2026

Exploited and recent CVEs

  • CVE-2026-111606 High 8.1 Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC 0.2%
  • CVE-2026-91079 High 8.5 Huly Platform through 0.7.426 SSRF via Print Service 0.4%
  • CVE-2026-56769 High 8.5 Huly Platform - Server-Side Request Forgery via /import Endpoint 0.4%
  • CVE-2026-12213 Medium 4.3 hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization 0.2%
  • CVE-2026-12212 Medium 4.3 hcengineering Huly Platform RPC operations.ts getMailboxSecret access control 0.2%
  • CVE-2026-5623 Medium 6.3 hcengineering Huly Platform Import Endpoint index.ts server-side request forgery 0.2%
  • CVE-2026-5622 Low 3.7 hcengineering Huly Platform JWT Token token.ts hard-coded key 0.3%