NVD disclosure day
CVE-2026-24858
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Fortinet devices with FortiCloud SSO enabled allow attackers to bypass security and access other accounts' devices. This is critical because it grants unauthorized access to network management and security functions.
CVE-2026-24881
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in GnuPG that can be triggered by a crafted S/MIME message, potentially causing a stack-based buffer overflow in `gpg-agent`. This could lead to denial of service or memory corruption that may allow for remote code execution. Although GnuPG is often used locally, its processing of external messag
CVE-2026-24874
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A type confusion vulnerability in xray-monolith may allow an unauthenticated attacker to compromise confidentiality and integrity by sending specially crafted network requests. The extent of its reachability and impact on affected systems is currently under analysis.