CVE-2026-67919

Received Received - Intake

Remote Code Execution in Halo CMS

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: MITRE

Description

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-08-17

Generated

2026-08-18

AI Q&A

2026-08-18

EPSS Evaluated

N/A

NVD

CVE-2026-67919

EUVD

EUVD-2026-60544

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in Halo version 2.25.4 allows a remote attacker to execute arbitrary code. The issue is located in the PluginEndpoint.java file, specifically in the installFromUri method, and involves the DefaultPluginApplicationContextFactory components.

Impact Analysis

An attacker could exploit this flaw to run malicious code on your system remotely. This could lead to unauthorized access, data theft, or further compromise of your environment if you are using Halo 2.25.4.

Mitigation Strategies

Immediately update Halo to a patched version beyond 2.25.4 to address the arbitrary code execution flaw in PluginEndpoint.java and related components.

Hi! I’m here to help you understand CVE-2026-67919. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70