CVE-2026-91772 | halo-dev Halo up to 2.26.1 Anonymous Thumbnail Endpoint uri redirect

September 15, 2026 Yanac

A vulnerability was found in halo-dev Halo up to 2.26.1. It has been declared as problematic. Impacted is an unknown function of the component Anonymous Thumbnail Endpoint. The manipulation of the argument uri results in open redirect.

This vulnerability is identified as CVE-2026-91772. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More