NVD disclosure day

Published threat advisories for February 20, 2026

CVE-2026-26725

Attacker can gain full admin control of Print Shop Pro WebDesk

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical flaw in Print Shop Pro WebDesk lets anyone take full admin control of the system remotely, potentially impacting sensitive data and services.

NVD published: February 20, 2026

CVE advisoryCRITICAL

CVE-2025-10970

Kolay Software Talentics Blind SQL Injection

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical SQL injection vulnerability affects Talentics software, allowing unauthenticated attackers to potentially access and manipulate sensitive data by injecting malicious SQL commands. The full impact is uncertain due to the vendor's lack of response. Readers should confirm if Talentics is in use and assess poten

NVD published: February 20, 2026