[ Vendor · 3 CVEs ]

HuLaSpark

CVEs affecting HuLaSpark published in the last 30 days, plus any HuLaSpark CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-119650 30 Oct 2026 CVSS 5.4 HuLaSpark HuLa-ServerHuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows authenticated users to access…
CVE-2026-119651 30 Oct 2026 CVSS 5.4 HuLaSpark HuLa-ServerHuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to…
CVE-2026-119652 30 Oct 2026 CVSS 4.3 HuLaSpark HuLa-ServerHuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that allows authenticated users…