Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is fixed in 0.6.20 and 0.7.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25808 Authorization Bypass in Hollo Microblogging Software via ActivityPub Outbox Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25808
Post summary
The text announces CVE-2026-25808, describing an authorization bypass in Hollo Microblogging Software via the ActivityPub Outbox Endpoint, with no evidence of a PoC, exploit code, active exploitation, or patch availability.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fedify | hollo | - | - | - |