CVE-2022-26619: Halo

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function.

Affected products

• Halo Halo: version 1.4.17 only

Published 2022-04-05. Last modified 2026-06-17.