NVD disclosure day
CVE-2025-55748
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in XWiki Platform allows for unauthorized reading of configuration files through specific web endpoints. This could expose sensitive system setup details if reachable. It is important to determine if your organization uses XWiki Platform and assess potential exposure.
CVE-2025-53690
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Certain Sitecore products face a code injection risk due to a vulnerability in handling untrusted data. This could allow unauthorized code execution, impacting business operations.
CVE-2025-53693
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical cache poisoning vulnerability exists in Sitecore Experience Manager and Platform, allowing external input to manipulate the cache and potentially execute code. This issue affects multiple versions of these content management systems.
CVE-2025-1740
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Akinsoft MyRezzta allows for authentication bypass, potentially enabling unauthorized access and password recovery through brute force. This issue could expose sensitive system and user data if the application is reachable. It is important to confirm if this technology is in use and exposed to unders