NVD HIGH: CVE-2026-56769 — Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated...

Thursday, June 25, 2026 at 07:16 PM UTC·Source: NIST NVD

Updated: Tuesday, June 30, 2026 at 09:00 PM UTC

Executive Summary

Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspace users to make arbitrary server requests. Attackers can exploit this by supplying malicious URLs to fetch internal services, exfiltrate responses, and replay credentials against backend systems.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-56769

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Jun 25, 2026. Verified by: NIST.

Related Threats

HIGHRansomwareNEW

Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation

The ransomware landscape is reconsolidating around major players, with Qilin emerging as the leading RaaS operation, researchers say

37m agoInfosecurity Magazine

CRITICALVulnerability

ANCHOR-CI Framework Strengthens Partnerships and Information Sharing to Secure Critical Infrastructure

The Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) has announced the formation of the Alliance of […] The post ANCHOR-CI Framework Strengthens Partnerships and Information Sharing to Secure Critical Infrastructure appeared first on The HIPAA Journal .

1h agoHIPAA Journal

MEDIUMVulnerability

Starling to axe 130 jobs as part of automation drive

UK challenger bank Starling has announced plans to cut more than 100 jobs as part of an efficiency drive.

1h agoFinextra