What’s Vulnerable › Products

HeliumEdu platform vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your HeliumEdu platform version is affected

Latest HeliumEdu platform vulnerabilities

• CVE-2026-55876 — Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts (CVSS 3.5)
• CVE-2026-55875 — Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network (CVSS 4.3)