← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 18, 2026 · 18:19via CVEFeed

CVE-2026-67921 - Halo CMS Cross-Site Request Forgery Vulnerability

Brief

CVE ID : CVE-2026-67921

Published : Aug. 18, 2026, 6:19 p. m.

  • 49 minutes ago

Description : Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.

  • 4 via the CorsConfigurer. java and the CsrfConfigurer. java components. This allows a remote attacker to execute arbitrary code.

Severity: 0.0

  • NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Read more on CVEFeed