Vendor

Halo-Dev

2 briefs RSS

Halo: Path traversal in View Name Resolver (CVE-2026-116117)

A path traversal vulnerability exists in the halo-dev halo View Name Resolver component (up to 2.27.0-beta.1) via the template argument.

halo

1c 2w ago

high advisory

Improper Neutralization Vulnerability in Halo SpEL Handler

2 TTPs 1 CVE

Halo versions 2.25.4/2.26.1 and prior contain a critical vulnerability in the SpEL Handler component, allowing remote unauthenticated attackers to achieve remote code execution through improper expression neutralization.

Halo vulnerability rce webserver

2t 1c Sep 24, 2026