H
Vendor security profile
HumHub
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit1
Patch rate%71
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
1
0
0
0
0
3
1
0
CVE KEV
CVE severity distribution
7toplam CVE
High4 (57%)
Medium3 (43%)
Patch and exploitation view
%71
Verified patch
%0
CISA KEV
%14
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
7.2
CVE-2026-93769
HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover
H
Patch verifiedEPSS %0
7.2
CVE-2026-18430
HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason
H
Patch verifiedEPSS %1
7.2
CVE-2026-18756
HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering
H
Patch verifiedEPSS %0
7.4
CVE-2026-18526
HumHub 1.18.4 / 1.18.4-pl1 – Stored Cross-Site Scripting in oEmbed confirmation
H
Patch verifiedEPSS %0
6.1
CVE-2026-29052
Cross-site scripting in Humhub Calendar
H
Patch status unknownEPSS %0
6.5
CVE-2025-54790
SQL injection in Humhub Files
H
Patch status unknownEPSS %0
6.1
CVE-2025-54789
Vulnerability in Humhub Files
H
Patch verifiedEPSS %0