CVE-2026-16088
MEDIUMhalo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal
Title source: cnaDescription
A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component Files Backup Endpoint. Performing a manipulation results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.
References (6)
Core 6
Core References
Vdb Entry, Technical Description vdb-entry
technical-description
VDB-379798 | halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal
https://vuldb.com/vuln/379798
Signature, Permissions Required signature
permissions-required
VDB-379798 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/379798/cti
Third Party Advisory third-party-advisory
CVE-2026-16088 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-16088
Third Party Advisory third-party-advisory
Submit #853097 | halo <=2.24.2 Arbitrary File Read
https://vuldb.com/submit/853097
Exploit exploit
issue-tracking
https://github.com/halo-dev/halo/issues/10064
Product product
https://github.com/halo-dev/halo/
Scores
CVSS v3
4.7
EPSS
0.0033
EPSS Percentile
25.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-22
Status
published
Products (3)
halo-dev/halo
2.24.0
halo-dev/halo
2.24.1
halo-dev/halo
2.24.2
Published
Jul 18, 2026
Tracked Since
Jul 18, 2026