NVD disclosure day
CVE-2025-10035
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A deserialization vulnerability in Fortra's GoAnywhere MFT may allow an attacker to execute commands, potentially impacting systems and data.
CVE-2025-54807
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists where a hardcoded secret in device firmware allows attackers to bypass authentication and gain complete system access. This issue is relevant to systems using this firmware, and if reachable, could compromise system integrity and availability. Readers should care because this could lead
CVE-2025-30519
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Dover Fueling Solutions ProGauge MagLink LX4 devices have unchangeable default root credentials, allowing network-accessible attackers to gain administrative control. This could impact system configuration and operational data of fuel management systems. Confirming device relevance and network exposure is crucial.