Security Advisory
CVE-2026-16088
4.7
MEDIUM
Vulnerability Description
A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component Files Backup Endpoint. Performing a manipulation results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published Date
July 18, 2026
Official Source
NIST NVD Advisory