PatchTheCVEhumhub vulnerabilities
Recent CVEs affecting humhub products. 6 tracked.
humhub has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-03-06. Highest priority: CVE-2024-52043 (score 33/100).
- CVE-2026-29052 MEDIUM 6.1 UPGRADE The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitatio
- CVE-2025-54789 MEDIUM 6.1 UPGRADE Files is a module for managing files inside spaces and user profiles
- CVE-2025-54790 MEDIUM 6.5 UPGRADE Files is a module for managing files inside spaces and user profiles
- CVE-2026-29048 MEDIUM 6.1 DOWNGRADE HumHub is an Open Source Enterprise Social Network
- CVE-2025-64442 MEDIUM 6.1 UPGRADE HumHub is an Open Source Enterprise Social Network
- CVE-2024-52043 MEDIUM 5.3 UPGRADE Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co
FAQ
How do I fix humhub vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is humhub being exploited right now?
None of the tracked humhub CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which humhub CVE should I patch first?
CVE-2024-52043 currently ranks highest (33/100): Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co.