CVE-2025-70886

An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.44% chance of exploitation in the next 30 days, 37th percentile

Published

2026-02-12

Proof-of-concept exploits (2)

• https://howiehz.top/archives/halo-comment-payload-tweaker
• HowieHz/CVE-2025-70886

References

• CVE Record
• NVD entry

Related

• CVE-2025-7088
• CVE-2025-7089
• CVE-2025-7087
• CVE-2025-70899
• CVE-2025-7086
• CVE-2025-7090