2 matches found
CVE-2026-36757
A Server-Side Request Forgery SSRF in the /plugins/name/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request...
4.3CVSS0.00172EPSS
SaveExploits0References2
PT-2026-36118
A Server-Side Request Forgery SSRF in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request...
4.3CVSS5.2AI score0.00168EPSS
SaveExploits0References3
20