Skip to content
OpenAdvisories

Vendor

hcengineering

7 known vulnerabilities.

Products

Huly Platform 5 platform 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-12213

    hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization

    A vulnerability was found in hcengineering Huly Platform up to 0.7.0. Affected by this vulnerability is the function getAccountInfo of the file server/account/src/operations.ts of the component User Information Handler. The manipulation results in improper au…

    hcengineering Huly Platform
  • Medium 4.3
    CVE-2026-12212

    hcengineering Huly Platform RPC operations.ts getMailboxSecret access control

    A vulnerability has been found in hcengineering Huly Platform up to 0.7.0. Affected is the function getMailboxSecret of the file server/account/src/operations.ts of the component RPC Interface. The manipulation leads to improper access controls. The attack ma…

    hcengineering Huly Platform
  • Medium 6.3
    CVE-2026-5623

    hcengineering Huly Platform Import Endpoint index.ts server-side request forgery

    A vulnerability was identified in hcengineering Huly Platform 0.7.382. This affects an unknown part of the file server/front/src/index.ts of the component Import Endpoint. Such manipulation leads to server-side request forgery. The attack can be launched remo…

    hcengineering Huly Platform