Hulaspark Hula-Server
2 CVEs affecting Hulaspark Hula-Server. Latest disclosed: 2026-10-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-119651 | Medium | 5.4 | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to delete other… |
CVE-2026-119652 | Medium | 4.3 | 2026-10-30 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that allows authenticated users to view oth… |