humhub vulnerabilities and fixes

Recent CVEs affecting humhub, with upgrade or downgrade steps. 3 tracked.

humhub has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-03-06. Highest priority: CVE-2024-52043 (score 33/100).

• CVE-2026-29048 MEDIUM 6.1 DOWNGRADE HumHub is an Open Source Enterprise Social Network
• CVE-2025-64442 MEDIUM 6.1 UPGRADE HumHub is an Open Source Enterprise Social Network
• CVE-2024-52043 MEDIUM 5.3 UPGRADE Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co

FAQ

How do I fix humhub vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is humhub being exploited right now?

None of the tracked humhub CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which humhub CVE should I patch first?

CVE-2024-52043 currently ranks highest (33/100): Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co.

RSS feed for humhub · ← Back to latest CVEs