NVD disclosure day
CVE-2026-27577
Halo Surface Signal: 3 out of 5 — possibly public-facing.
n8n, an open-source workflow automation platform, has a vulnerability where an authenticated user with workflow modification permissions can execute unintended system commands by abusing crafted expressions. This could impact the integrity and availability of the host system. Organizations should upgrade n8n or conside
CVE-2026-22719
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An external attacker can exploit a flaw in VMware Aria Operations during support-assisted migration to execute unauthorized commands. This allows them to take full control of the platform, granting access to sensitive data and potentially compromising the organization's wider virtual infrastructure.
CVE-2026-20133
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An internal attacker with administrative access to Cisco Catalyst SD-WAN can bypass protections to access restricted system files. This could enable them to steal network credentials and configuration data, potentially leading to unauthorized control over the organization's network infrastructure.
CVE-2026-20128
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Cisco Catalyst SD-WAN Manager may allow an attacker to steal credentials and gain control of your network. This is a high-risk vulnerability actively exploited by attackers, demanding immediate attention.
CVE-2026-20127
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Cisco Catalyst SD-WAN controllers are vulnerable, allowing an external attacker to bypass security checks and gain full administrative access. This enables them to manipulate enterprise network settings, creating a serious risk of unauthorized traffic control or disruption across the organization.
CVE-2026-20122
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An internal attacker with limited access to the Cisco Catalyst SD-WAN Manager can overwrite system files to escalate their privileges. This could grant them unauthorized administrative control over the company's critical network management infrastructure.
CVE-2026-2624
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical authentication bypass vulnerability exists in ePati Antikor Next Generation Firewall, potentially allowing unauthorized access to critical functions. This could lead to altered firewall behavior or system compromise if the vulnerability is reachable. It is important to identify affected instances and their e
CVE-2026-27608
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Parse Dashboard's AI Agent API lacks authorization, allowing authenticated users to access unauthorized applications and potentially perform unauthorized data modifications. This vulnerability is present in specific versions of Parse Dashboard, but only affects instances with the `agent` configuration enabled. You shou
CVE-2026-27595
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Parse Dashboard contains vulnerabilities allowing unauthenticated remote attackers to read and write to any connected Parse Server database using the master key if the opt-in AI Agent feature is enabled. This could lead to unauthorized data access or modification. You should care if your Parse Dashboard has the AI Agen