HC
Vendor
hcengineering
9
CVEs
0
On KEV
1
New 30D
Products
HP8.1
Huly Platform
hcengineering
5 CVEs0 on KEV1 new
HU6.5
Huly
Hcengineering
2 CVEs0 on KEV0 new
PL8.5
platform
hcengineering
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111606 | HP Huly Platform hcengineering | 8.1 | Oct 16 | Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC |
| CVE-2026-91079 | PL platform hcengineering | 8.5 | Sep 14 | Huly Platform through 0.7.426 SSRF via Print Service |
| CVE-2026-56769 | PL platform hcengineering | 8.5 | Jun 25 | Huly Platform - Server-Side Request Forgery via /import Endpoint |
| CVE-2026-12213 | HP Huly Platform hcengineering | 4.3 | Jun 15 | hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization |
| CVE-2026-12212 | HP Huly Platform hcengineering | 4.3 | Jun 15 | hcengineering Huly Platform RPC operations.ts getMailboxSecret access control |
| CVE-2026-5623 | HP Huly Platform hcengineering | 6.3 | Apr 6 | hcengineering Huly Platform Import Endpoint index.ts server-side request forgery |
| CVE-2026-5622 | HP Huly Platform hcengineering | 3.7 | Apr 6 | hcengineering Huly Platform JWT Token token.ts hard-coded key |
| CVE-2024-48450 | HU Huly Hcengineering | 6.5 | Oct 25 | An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into chat group |
| CVE-2024-27707 | HU Huly Hcengineering | 4.3 | Mar 7 | Server Side Request Forgery (SSRF) vulnerability in hcengineering Huly Platform v.0.6.202 allows attackers to run arbitrary code via upload of crafted SVG file |