CVE-2026-67921 - Halo CMS Cross-Site Request Forgery Vulnerability
Brief
CVE ID : CVE-2026-67921
Published : Aug. 18, 2026, 6:19 p. m.
- 49 minutes ago
Description : Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.
- 4 via the CorsConfigurer. java and the CsrfConfigurer. java components. This allows a remote attacker to execute arbitrary code.
Severity: 0.0
- NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
