CyberSecBulletin

Huimeicloud vulnerabilities

We track 1 vulnerability in Huimeicloud products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2026.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest Huimeicloud vulnerabilities

  • 7.3 High severity

    hm_editor: Server-Side Request Forgery

    CVE-2026-5346Huimeicloud

    A vulnerability was determined in huimeicloud hm_editor up to 2.2.3. Impacted is the function client.get of the file src/mcp-server.js of the component image-to-base64 Endpoint. Executing a manipulation of the argument url can lead to server-side request forge