Hcengineering vulnerabilities

Products

• Huly Platform 5
• Huly 2
• Platform 2

Newest

• hcengineering huly platform Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC CVE-2026-111606 8.6 HighOctober 16, 2026
• hcengineering platform Huly Platform through 0.7.426 SSRF via Print Service CVE-2026-91079 6.3 MediumSeptember 14, 2026
• hcengineering platform Huly Platform - Server-Side Request Forgery via /import Endpoint CVE-2026-56769 6.3 MediumJune 25, 2026
• hcengineering huly platform hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization CVE-2026-12213 5.3 MediumJune 15, 2026
• hcengineering huly platform hcengineering Huly Platform RPC operations.ts getMailboxSecret access control CVE-2026-12212 5.3 MediumJune 15, 2026
• hcengineering huly platform hcengineering Huly Platform Import Endpoint index.ts server-side request forgery CVE-2026-5623 5.3 MediumApril 6, 2026
• hcengineering huly platform hcengineering Huly Platform JWT Token token.ts hard-coded key CVE-2026-5622 6.3 MediumApril 6, 2026
• hcengineering huly An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute... CVE-2024-48450 6.5 MediumOctober 25, 2024
• hcengineering huly Server Side Request Forgery (SSRF) vulnerability in hcengineering Huly Platform v.0.6.202 allows... CVE-2024-27707 4.3 MediumMarch 7, 2024