Hallo Welt! GmbH has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.4 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.4
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Weakness classes
Products
- Extension:BlueSpiceUserManager 1
- bluespice/wiki 1
Worst active — by depth score
Hallo Welt! GmbH vulnerabilities
CVEs affecting Hallo Welt! GmbH, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-25784Critical· 9.8bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop
Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's Lo…
CVE-2026-25716High· 7.1BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users
Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without special privileges to block or unblock arbitrary user accounts, including administrators. The REST e…