NVD disclosure day
CVE-2026-35030
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in LiteLLM, an AI gateway, could allow an unauthenticated attacker to impersonate legitimate users by exploiting a JWT authentication cache mechanism. This affects deployments where JWT/OIDC authentication is specifically enabled, potentially leading to unauthorized access to user identities and permiss
CVE-2026-34977
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Aperi'Solve, an open-source steganalysis web platform, allows unauthenticated attackers to achieve root-level command execution in the worker container via a single HTTP request. This could result in unauthorized access and modification of user-uploaded images, analysis results, and password
CVE-2026-31405
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An external attacker can exploit a vulnerability in Linux systems by sending malicious network data. This can crash servers to cause major service outages, or potentially allow them to gain complete control of the affected systems.