NVD disclosure day
CVE-2026-33816
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An external attacker can target the pgx Go library by sending specially crafted data to applications communicating with a database. This can corrupt memory and trigger repeated system crashes, leading to severe service outages and disrupted operations for all users.
CVE-2026-33815
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An external attacker can send malicious data to applications using the jackc/pgx database library to trigger system crashes. This can result in persistent service outages, taking down critical business functions by disabling database connectivity.
CVE-2026-34197
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An internal attacker with administrative credentials could take full control of the Apache ActiveMQ server by running malicious commands. This flaw poses a critical business risk, as it could lead to total system compromise and unauthorized access to sensitive message data.