PatchTheCVEhma vulnerabilities
Recent CVEs affecting hma products. 1 tracked.
hma has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-05-20. Highest priority: CVE-2022-26634 (score 41/100).
- CVE-2022-26634 HIGH 7.8 DOWNGRADE HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the sys
FAQ
How do I fix hma vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hma being exploited right now?
None of the tracked hma CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hma CVE should I patch first?
CVE-2022-26634 currently ranks highest (41/100): HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the sys.