PatchTheCVEhustoj vulnerabilities
Recent CVEs affecting hustoj products. 3 tracked.
hustoj has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-27. Highest priority: CVE-2026-24479 (score 76/100).
- CVE-2026-24479 CRITICAL 9.8 UPGRADE HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training
- CVE-2026-23873 CRITICAL 9.0 UPGRADE hustoj is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training
- CVE-2025-50938 MEDIUM 6.1 DOWNGRADE Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.
FAQ
How do I fix hustoj vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hustoj being exploited right now?
None of the tracked hustoj CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hustoj CVE should I patch first?
CVE-2026-24479 currently ranks highest (76/100): HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training.