PT-2026-60931 · Halo Dev · Halo

Rekczh · CVE-2026-16088 · Publicado 2026-07-18 · Atualizado 2026-07-18

NVD

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:L/Au:M/C:P/I:P/A:P

A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component Files Backup Endpoint. Performing a manipulation results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-16088

Produtos afetados

Halo

Referências · 7

• 🔥 https://github.com/halo-dev/halo/issues/10064 · Exploit
• https://vuldb.com/cve/CVE-2026-16088 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-16088 · Nota de Segurança
• https://vuldb.com/vuln/379798/cti · Nota
• https://vuldb.com/submit/853097 · Nota
• https://vuldb.com/vuln/379798 · Nota
• https://github.com/halo-dev/halo · Nota