6 matches found
CVE-2026-70886
...
CVE-2026-70886
...
CVE-2026-70886
Oracle Hyperion DRM 11.2.25.0.000 is affected by a high-severity (CVSS 8.8) flaw in its Access and security component. A low-privileged attacker with HTTP network access can exploit it to fully compromise the application (C/H/I/A impacts). No exploit code or in-the-wild activity is reported; appl...
CVE-2025-70886
creationtimestamp| type| source ---|---|--- 2026-02-13 09:23:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meq6osbzck2h...
CVE-2025-70886
Halo CMS (v2.22.4 and earlier) is vulnerable to a persistent denial-of-service (DoS) attack. A remote attacker can submit a crafted payload—specifically missing fields like subjectRef.version—to the public comment submission endpoint . Once saved, this malformed data triggers an unhandled excepti...
