NVD disclosure day
CVE-2026-26215
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Manga Image Translator's shared API mode has a critical remote code execution vulnerability due to unsafe deserialization of attacker-controlled data. Attackers can bypass authorization checks to run arbitrary code on the server without authentication, posing a significant risk to networked services.
CVE-2026-20700
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory corruption vulnerability exists in multiple Apple operating systems. An attacker with memory write capability could execute arbitrary code, impacting data and system integrity. This issue has reportedly been exploited in sophisticated attacks.
CVE-2025-46310
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An internal attacker with administrative rights on macOS could delete protected system files, potentially causing system instability or making the system unbootable. This matters to the business as it could lead to significant disruption and loss of service.
CVE-2025-43403
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An internal attacker with a malicious app on macOS can access sensitive user data, potentially leading to a privacy breach and data exfiltration. This matters to the business as it risks exposing private customer information.
CVE-2025-69872
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The DiskCache library has a critical vulnerability where an attacker with write access to the cache directory can achieve arbitrary code execution when an application reads from the cache. This could impact application confidentiality, integrity, and availability. It is important to confirm if your organization uses th
CVE-2025-12059
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Logo j-Platform allows sensitive information to be inserted into externally accessible files or directories due to improperly configured access controls. This could lead to data exposure and integrity loss if the platform is reachable. Confirming relevance and exposure to your organization's deployed
CVE-2025-8668
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A cross-site scripting vulnerability in Turboard may allow attackers to inject malicious code into web pages, potentially leading to unauthorized actions. If reachable, this could impact service behavior and expose user data. Its relevance and potential exposure need confirmation.
CVE-2025-8025
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Dinosoft ERP allows unauthorized access to sensitive functions due to improper access controls. This could expose business operations and data to compromise if the system is reachable. The vendor has not responded to the disclosure.