NVD disclosure day

Published threat advisories for March 17, 2026

CVE advisoryCRITICAL

CVE-2026-32841

Edimax GS-5008PL could allow an internal attacker to gain administrative access

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

An external attacker could gain administrative control of the Edimax GS-5008PL device after any user logs in, allowing them to change settings, update firmware, or modify passwords. This compromises the device's security and operational integrity.

NVD published:

CVE advisoryCRITICAL

CVE-2026-4312

DrangSoft GCB FCB Audit Software API Authentication Bypass

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A critical vulnerability in GCB/FCB Audit Software allows unauthenticated remote attackers to create new administrative accounts by accessing specific APIs. This could grant unauthorized access to sensitive audit functionalities and data within government financial cybersecurity systems. The primary concern is determin

NVD published: