NVD disclosure day
CVE-2026-28806
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Nerves Hub has a critical flaw allowing attackers to control devices outside their company, potentially disrupting services and firmware updates. This is serious because it affects device management and could lead to full device compromise.
CVE-2026-28292
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in the `simple-git` Node.js library allows remote code execution, potentially enabling attackers to control the host system. This issue bypasses prior security fixes and could be exploited through specially crafted input. Confirmation of `simple-git` usage within the environment is necessary to
CVE-2026-23240
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An external attacker can exploit a memory handling flaw in the Linux kernel to crash servers or gain full administrative control. This could lead to major operational disruption and unauthorized access to our private business data.
CVE-2025-56422
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A deserialization vulnerability in LimeSurvey allows remote attackers to execute arbitrary code on the server. This could lead to compromised server integrity if the application processes untrusted serialized data. Security-aware leaders should confirm if their organization uses this survey platform and assess its expo