CVE-2026-16088 in haloinfo

Prediction

by VulDB Data Team • 07/17/2026

A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component Files Backup Endpoint. Performing a manipulation results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

VulDB

Moderation

accepted

CPE

ready

Exploit

Download

EPSS

0.00000

KEV

no

Activities

low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-16088
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-16088
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-16088/

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!