NVD disclosure day
CVE-2026-6100
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A use-after-free vulnerability exists in Python's compression libraries when a decompressor instance is reused after a memory allocation failure, potentially leading to instability or security risks if the system is under memory pressure. This flaw requires a specific usage pattern where decompressor objects are re-use
CVE-2025-31991
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated attacker can exploit HCL DevOps Velocity by repeatedly attempting to log in, bypassing rate limits. This could allow unauthorized access to the system.
CVE-2026-31414
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An internal attacker can exploit a memory flaw in the Linux kernel to crash the system or escalate their privileges to gain full administrative control. This risk to core server stability could lead to severe operational outages and compromise the security of business applications running on affected systems.
CVE-2026-5936
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Foxit PDF Services API allows attackers to craft URLs that trick the server into making requests to arbitrary destinations. This could enable probing of internal network services, accessing cloud metadata, or bypassing access controls, potentially resulting in sensitive data disclosure and further sy
CVE-2026-40446
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A type confusion vulnerability in Samsung Escargot allows pointer manipulation. This could lead to unauthorized access or modification of sensitive business data, impacting affected organizations and their systems.