CyberSecBulletin

Hargata vulnerabilities

We track 2 vulnerabilities in Hargata products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.

2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score

Latest Hargata vulnerabilities

  • 7.1 High severity

    lubelog: Authorization Bypass Through User-Controlled Key

    CVE-2026-62279Hargata

    LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, an authenticated user could submit caller-controlled recordIds to the DuplicateRecordsToOtherVehicles endpoint while naming destination vehicleIds

  • 8.1 High severity

    lubelog: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-62278Hargata

    LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authenticated non-administrative users could reach HandleTranslationFileUpload and influence the name passed from Controllers/FilesController.cs t