NVD disclosure day
CVE-2026-28474
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The OpenClaw Nextcloud Talk plugin has a vulnerability that allows unauthorized access to direct messages and rooms by impersonating an allowlisted user. This could expose private conversations to unauthorized parties. Confirm if your Nextcloud Talk plugin is affected to protect communication confidentiality.
CVE-2026-24457
Halo Surface Signal: 3 out of 5 — possibly public-facing.
OpenMQ's configuration parsing vulnerability allows remote attackers to read arbitrary files from a message broker's server, potentially exposing sensitive data or enabling code execution. This issue impacts specific versions of OpenMQ and related GlassFish software, requiring assessment of affected deployments.
CVE-2026-30794
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
The RustDesk Client has an improper certificate validation vulnerability that could allow an attacker to intercept and manipulate communications. This affects the client's TLS transport and HTTP API client modules, potentially compromising remote desktop session data and confidentiality. Confirmation of the client's pr
CVE-2026-30790
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in RustDesk's API login process could allow attackers to intercept credentials via network sniffing, which can then be used for offline brute-forcing. This affects the Server Pro login over HTTP and is exploitable when the API is reachable. This issue is relevant due to the potential for unauthorized ac
CVE-2026-30789
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the RustDesk client could allow an attacker to bypass authentication by reusing session information, potentially enabling unauthorized access. This issue impacts the client's login and peer authentication modules across various operating systems, making it important to determine if this technology is
CVE-2026-2743
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
SeppMail's large file transfer feature has a critical flaw allowing attackers to take over your system by uploading malicious files. This internet-facing vulnerability could grant them full control.
CVE-2026-1678
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Zephyr RTOS DNS resolver allows a malicious DNS response to cause an out-of-bounds write, potentially leading to denial of service or code execution when assertions are disabled. This issue is reachable via the network.