NVD disclosure day
CVE-2025-61934
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Productivity Suite software allows unauthenticated remote attackers to access a PLC simulator, potentially reading, writing, or deleting arbitrary files on the target system. The relevance depends on whether this simulator is in use and reachable within your environment.
CVE-2025-59503
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical server-side request forgery vulnerability exists in Azure Compute Gallery, potentially allowing unauthorized network access to elevate privileges. The concern lies in understanding the exposure of this internal cloud resource provider service to your environment.
CVE-2025-59273
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An improper access control vulnerability in Azure Event Grid may allow an unauthorized network attacker to elevate privileges. This could affect the integrity and availability of services relying on event handling if the service is reachable. Readers should care because this critical flaw in a core cloud service could
CVE-2025-58428
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in the TLS4B ATG system's SOAP-based interface, allowing authenticated remote attackers to execute system-level commands on the underlying Linux operating system. This could result in unauthorized remote command execution and potential lateral movement within a network if the interface i
CVE-2025-11023
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in AcBakImzala may allow attackers to include and execute arbitrary local files. This could expose sensitive system information or alter application behavior. Readers should determine if AcBakImzala is in use within their environment and assess potential exposure.
CVE-2025-47699
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Gallagher Command Centre Server's Morpho integration allows authenticated, low-privilege users to make critical changes to local Morpho devices. This could impact device functionality and control if the integration is reachable.
CVE-2025-12104
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Outdated user interface dependencies in BLU-IC2 and BLU-IC4 devices present a critical risk, potentially allowing for widespread compromise without requiring user interaction or special privileges. This vulnerability stems from the use of vulnerable third-party components within the product's interface, which could lea