hcengineering Huly Platform

• CVE-2026-111606 High 8.1 Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC 0.2%
• CVE-2026-12213 Medium 4.3 hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization 0.2%
• CVE-2026-12212 Medium 4.3 hcengineering Huly Platform RPC operations.ts getMailboxSecret access control 0.2%
• CVE-2026-5623 Medium 6.3 hcengineering Huly Platform Import Endpoint index.ts server-side request forgery 0.2%
• CVE-2026-5622 Low 3.7 hcengineering Huly Platform JWT Token token.ts hard-coded key 0.3%