CyberSecBulletin

Hallo Welt! vulnerabilities

We track 2 vulnerabilities in Hallo Welt! products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.

2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score

Latest Hallo Welt! vulnerabilities

  • 9.8 Critical severity

    BlueSpice: Improper Privilege Management

    CVE-2026-25784Hallo Welt!

    Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was int

  • 7.1 High severity

    BlueSpice: Missing Authorization

    CVE-2026-25716Hallo Welt!

    Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without special privileges to block or unblock arbitrary user accounts, including administrators. The REST endpoints /bs-usermanage