A vulnerability was found in Halo 2.22.14 and classified as critical. Affected by this issue is some unknown functionality of the file /themes/-/install-from-uri of the component GET Handler. Such manipulation leads to server-side request forgery.
This vulnerability is referenced as CVE-2026-36758. It is possible to launch the attack remotely. No exploit is available.
