NVD disclosure day

Published threat advisories for February 27, 2026

CVE-2025-11252

Windesk.Fm SQL Injection Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical SQL injection vulnerability in Signum Technology Promotion and Training Inc.'s Windesk.Fm software could allow attackers to access and manipulate data. This issue is reachable over the network and does not require authentication. While the vendor has released a fix, understanding the potential impact on faci

NVD published: February 27, 2026

CVE advisoryCRITICAL

CVE-2025-11251

Daynex E-Commerce Platform SQL Injection Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical SQL injection vulnerability exists in the Dayneks E-Commerce Platform, allowing attackers to manipulate database queries through specially crafted input. This could lead to unauthorized access, modification, or deletion of sensitive data. The vendor has not responded to inquiries about this issue.

NVD published: February 27, 2026