CVE-2026-119650 | HuLaSpark HuLa-Server up to 3.0.7 PrivacyController uid resource injection

October 30, 2026 Yanac

A vulnerability classified as critical has been found in HuLaSpark HuLa-Server up to 3.0.7. The affected element is an unknown function of the component PrivacyController. This manipulation of the argument uid causes improper control of resource identifiers.

This vulnerability is tracked as CVE-2026-119650. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More