CVE-2026-36756 | halo 2.22.14 GET install-from-uri server-side request forgery

A vulnerability has been found in halo 2.22.14 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /plugins/-/install-from-uri of the component GET Handler. This manipulation causes server-side request forgery.

The identification of this vulnerability is CVE-2026-36756. It is possible to initiate the attack remotely. There is no exploit available.