What’s Vulnerable › Products

hcengineering Huly Platform vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your hcengineering Huly Platform version is affected

Latest hcengineering Huly Platform vulnerabilities

• CVE-2026-111606 — Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC (CVSS 8.1)
• CVE-2026-12213 — hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization (CVSS 4.3)
• CVE-2026-12212 — hcengineering Huly Platform RPC operations.ts getMailboxSecret access control (CVSS 4.3)
• CVE-2026-5623 — hcengineering Huly Platform Import Endpoint index.ts server-side request forgery (CVSS 6.3)
• CVE-2026-5622 — hcengineering Huly Platform JWT Token token.ts hard-coded key (CVSS 3.7)