NVD disclosure day
CVE-2026-3502
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the TrueConf Client update process allows an external attacker to intercept connections and install malicious software. This provides the attacker full control over the computer, creating a critical risk of data theft and unauthorized system access.
CVE-2026-5121
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical flaw in libarchive could allow attackers to run their own code on your systems by sending a specially crafted file, a serious risk for any system that processes ISO9660 images.
CVE-2025-15379
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability exists in MLflow model serving. An attacker could execute arbitrary commands on systems deploying models by supplying a malicious model artifact. This could lead to unauthorized command execution on the host system where the model is served.