NVD disclosure day
CVE-2025-15620
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A denial-of-service vulnerability in the HiOS Switch Platform's web interface allows unauthenticated remote attackers to reboot devices via crafted HTTP requests, causing service disruption. This could impact network availability if reachable. Confirmation of affected devices and exposure is recommended.
CVE-2026-34877
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in Mbed TLS allows an attacker to corrupt memory and potentially execute arbitrary code by manipulating serialized SSL context or session data, due to improper handling of privileged APIs. This vulnerability could affect the integrity and availability of services using the Mbed TLS library. It is uncertain if Mb
CVE-2026-35002
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Agno software permits arbitrary code execution when an attacker manipulates the `field_type` parameter in a function call. This flaw, present in versions prior to 2.3.24, could allow remote code execution by influencing model execution. Understanding Agno's presence and exposure within the e
CVE-2026-32871
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in FastMCP allows path traversal, enabling attackers to access arbitrary backend endpoints by exploiting unencoded URL parameters. This can lead to authenticated server-side request forgery, exposing internal services.