CVE-2025-70886

Published Feb 12, 2026·Updated Jun 17, 2026

NVD Description

An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint

Public Exploits & PoCs1 found

PoC: CVE-2025-70886

A Proof of Concept (PoC) exploit for CVE-2025-70886, a persistent denial-of-service vulnerability in Halo CMS (v2.22.4 and earlier) that allows unauthenticated attackers to crash the admin comment interface by submitting malformed payloads.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free