hcengineering

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

hcengineering records in CISA KEV

No hcengineering vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2026-40933 CVE-2026-56769 · GHSA-wg7f-c2g2-5gwm

Huly Platform - Server-Side Request Forgery via /import Endpoint

MEDIUM 61

Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspace users to make arbitrary server request…

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00369 Published 2026-06-25 Fixed CWE-918

TI-2026-04931 CVE-2026-5623 · GHSA-c8m8-4468-h6xx

hcengineering Huly Platform Import Endpoint index.ts server-side request forgery

MEDIUM 57

A vulnerability was identified in hcengineering Huly Platform 0.7.382.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00202 Published 2026-04-06 No fix listed CWE-918

TI-2026-75392 CVE-2026-111606 · GHSA-8cm6-vrv9-4v98

Missing authorization in Huly Platform enables account takeover

LOW 39

Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to merge arbitrary persons by calling the mergeSpecifiedPersons account RPC.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00238 Published 2026-10-16 No fix listed CWE-862

TI-2026-61868 CVE-2026-91079 · GHSA-prm2-rg4g-w438

Huly Platform through 0.7.426 SSRF via Print Service

LOW 28

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00369 Published 2026-09-14 No fix listed CWE-918

TI-2026-04930 CVE-2026-5622 · GHSA-x32v-jmqh-4323

hcengineering Huly Platform JWT Token token.ts hard-coded key

LOW 28

A vulnerability was determined in hcengineering Huly Platform 0.7.382.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0026 Published 2026-04-06 No fix listed CWE-320

TI-2026-10505 CVE-2026-12213 · GHSA-r253-j6c8-4228

hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization

LOW 23

A vulnerability was found in hcengineering Huly Platform up to 0.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00203 Published 2026-06-15 No fix listed CWE-266

TI-2026-10504 CVE-2026-12212 · GHSA-gw69-97jp-c5gg

hcengineering Huly Platform RPC operations.ts getMailboxSecret access control

LOW 23

A vulnerability has been found in hcengineering Huly Platform up to 0.7.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00207 Published 2026-06-15 No fix listed CWE-266

Open these records in search →

Critical	0
High	1
Medium	6
Low	0
No CVSS	0