NVD disclosure day
CVE-2025-65882
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in the system upgrade helper of openmptcprouter, potentially allowing unauthenticated attackers to write arbitrary files or execute commands. This impacts network edge devices, raising concerns about system integrity and unauthorized control if the technology is exposed.
CVE-2025-62221
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Windows Cloud Files Mini Filter Driver allows local attackers to elevate privileges. This could impact system integrity and data security for organizations. The vulnerability is actively exploited, posing a realistic business risk.
CVE-2025-59719
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb may allow an unauthenticated attacker to bypass FortiCloud SSO authentication via a crafted SAML response, potentially enabling unauthorized access to protected applications.
CVE-2025-59718
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Fortinet products allows unauthorized access by bypassing SSO authentication. This impacts affected organizations by potentially exposing systems and data, creating business risk. Organizations should identify affected assets and apply vendor fixes.
CVE-2025-12504
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL Injection vulnerability in Talent Software UNIS allows attackers to inject malicious commands into databases, potentially leading to unauthorized access or manipulation of sensitive information. This issue is reachable over a network. Confirming if UNIS is deployed is crucial.
CVE-2025-11022
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A Cross-Site Request Forgery vulnerability in Personal Project Panilux could allow attackers to inject commands if users interact with malicious content. The vendor has disclaimed ownership, leaving a clear path for remediation uncertain. The primary concern is to determine if this project is in use and potentially exp