NVD disclosure day
CVE-2026-26339
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Hyland Alfresco Transformation Service, a document processing component, has a critical vulnerability allowing unauthenticated remote code execution. This affects system confidentiality, integrity, and availability. Confirming its use and exposure is essential.
CVE-2025-9953
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical authorization bypass vulnerability exists in DATABASE Software Training Consulting Ltd. Databank Accreditation Software, allowing SQL injection. An unauthenticated attacker could exploit this flaw by sending crafted network requests, potentially leading to unauthorized data access and manipulation. The vendo
CVE-2025-8350
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in a content management system that allows attackers to bypass authentication and potentially split HTTP responses. This issue could permit unauthorized access and actions if the system is reachable. It is important to determine if your organization uses this technology and assess its ex