Sploitus

CVE-2026-67921

1 known exploit for CVE-2026-67921

Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote attacker to execute arbitrary code.

NVD status
Received
Published
2026-08-18
CVE-2026-67921 at NVD
Authoritative description, scoring and affected products

1 known exploit for CVE-2026-67921

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for CVE-2026-67919
2026-08-19 k0nnectGITHUB