Question 1

What is CVE-2026-67921 — CVE-2026-67921?

Accepted Answer

Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote attacker to execute arbitrary code.

Question 2

What is the authoritative source for CVE-2026-67921?

Accepted Answer

CVE-2026-67921 (CVE-2026-67921) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-67921CVE-2026-67921

Description

Scoring