NVD disclosure day
CVE-2026-6960
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The BookingPress Pro WordPress plugin has a flaw allowing attackers to upload any file, potentially giving them control of your website's server. This is a critical risk for sites using booking forms with a signature field.
CVE-2026-8428
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Concrete CMS installations are affected by a vulnerability where an attacker can trigger core system updates. This matters because it could allow an attacker to force the system to update to a version they specify, posing a business risk to organizations if exploited.
CVE-2026-8426
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Concrete CMS versions prior to 9.5.1 have a vulnerability that could allow an attacker to execute arbitrary code on the affected system. This occurs when an attacker manipulates a remote package update request. The potential impact includes unauthorized code execution on the web server, which could compromise data and
CVE-2026-8421
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A security flaw in Concrete CMS could let someone trick an administrator into installing harmful code, giving them control of your website. This requires an admin to visit a malicious link.
CVE-2026-8417
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Concrete CMS versions before 9.5.1 have a flaw that lets attackers trick administrators into upgrading software with just a link, potentially impacting site security.
CVE-2026-8350
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Concrete CMS allows authenticated users to gain administrative privileges by manipulating user group assignments. This could disrupt operations and impact data access controls. Organizations should identify affected systems and limit dashboard access.
CVE-2026-8203
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Concrete CMS has a flaw that lets editors inject harmful code, potentially stealing user information or hijacking sessions on websites.
CVE-2026-8197
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Concrete CMS versions 9.5.0 and below have a security flaw in their OAuth integration that could let an administrator see sensitive login information from users.
CVE-2026-8140
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Concrete CMS installations are affected by a vulnerability that allows an attacker to trick an authenticated administrator into downloading arbitrary marketplace packages, potentially leading to unauthorized software installation. The risk involves an unauthenticated attacker leveraging a CSRF flaw and an administrator
CVE-2026-8135
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Concrete CMS versions prior to 9.5.1 could allow unauthorized code execution. An authenticated administrator could exploit this flaw via the REST API, potentially leading to complete server takeover. This poses a significant business risk to organizations using affected versions.
CVE-2026-8134
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Concrete CMS has a critical flaw allowing administrators to execute malicious code on your server by uploading specially crafted files. This impacts internet-facing applications and deserves immediate attention.
CVE-2026-47102
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A LiteLLM vulnerability allows any user to gain full administrative control, accessing all data and user information. This needs immediate attention as it could lead to significant compromise.
CVE-2026-47101
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
LiteLLM allows authenticated users to create API keys granting admin access, bypassing security controls and enabling unauthorized control of your systems.
CVE-2026-4843
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An internal attacker with basic website access can use the GSheet For Woo Importer plugin to delete API tokens and configuration settings. This unauthorized access disrupts product data synchronization, causing a loss of functionality in automated import and export workflows.
CVE-2026-47114
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the IINA media player allows remote attackers to execute commands via a crafted URL. This could impact user systems by allowing arbitrary command execution upon user interaction with a malicious link and browser prompt. The business risk involves potential system compromise and unauthorized control.
CVE-2026-46473
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Organizations using the Authen::TOTP Perl library may be affected by predictable secret generation. This predictability poses a business risk by potentially allowing attackers to derive secrets, compromising security systems.
CVE-2026-48249
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Open ISES Tickets may allow an attacker to intercept sensitive data during mobile login. This could expose API keys or session information. The business risk involves potential unauthorized access and data manipulation.
CVE-2026-48248
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A flaw in Open ISES Tickets allows attackers to intercept sensitive data during login by bypassing security certificate checks. This impacts organizations using affected versions, risking exposure of API keys or session data. The realistic business risk involves potential data compromise during transit.
CVE-2026-48247
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Organizations using Open ISES Tickets may face risk from a TLS certificate verification flaw. An attacker on the network path could present a forged certificate to intercept or modify sensitive data in transit. This affects outbound HTTPS requests.
CVE-2026-48246
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Open ISES Tickets improperly disables security checks when making external requests, potentially exposing sensitive API keys or session data to attackers who can intercept network traffic.
CVE-2026-48242
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets exposes hardcoded database passwords in its code, potentially allowing unauthorized access to sensitive data if the code is publicly accessible. This issue warrants immediate attention for any organization using this software.
CVE-2026-48241
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets has a critical flaw where database login details are exposed in a public file, allowing anyone to potentially access sensitive customer data.
CVE-2026-48240
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets has a critical security flaw that lets attackers steal or alter your company's data through a common web portal. Update now to protect sensitive information.
CVE-2026-48239
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets has a SQL injection flaw that lets attackers steal or alter customer data by manipulating reports. Update to version 3.44.2 to protect sensitive information.
CVE-2026-48238
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets has a SQL injection flaw allowing authenticated users to steal or change customer data by exploiting the mobile interface. This could lead to sensitive information compromise.
CVE-2026-48237
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets has a flaw allowing authenticated users to corrupt or steal data from the system's database. Update now to prevent unauthorized access to sensitive information.
CVE-2026-48236
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets has a critical flaw allowing authenticated users to tamper with sensitive database information. Update now to protect your customer data from unauthorized access and modification.
CVE-2026-48235
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
This vulnerability in Open ISES Tickets affects how external GPS data is processed, potentially allowing attackers to manipulate location and assignment records. The risk involves unauthorized data alteration impacting operational visibility.
CVE-2026-48234
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A flaw in Open ISES Tickets could let someone with an account read or change your company's data by manipulating database requests. This is important because ticketing systems often hold sensitive customer information.
CVE-2026-48233
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Open ISES Tickets allows authenticated attackers to access, modify, or delete database contents. This risk arises from unescaped input that can alter query logic, potentially compromising data integrity and confidentiality. Organizations using this software should address this to protect sensitive in
CVE-2026-48232
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authenticated user can exploit a flaw in Open ISES Tickets to read, modify, or delete your sensitive database information. This vulnerability requires a patch to prevent unauthorized access.
CVE-2026-48231
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets has a vulnerability that lets authenticated users steal or change your company's important data. This is a serious risk that needs immediate attention.
CVE-2026-48213
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Open ISES Tickets has a vulnerability allowing authenticated users to inject harmful code, potentially leading to session hijacking or stolen credentials if viewed by another user.
CVE-2026-48207
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Apache Fory has a critical flaw allowing attackers to bypass security checks when processing data, potentially leading to system control. Update now.
CVE-2026-9089
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
ConnectWise Automate™ Agent component authenticity may not be fully verified, potentially allowing unauthorized modifications. This could impact affected systems and data. Organizations should update to a version that addresses this vulnerability to mitigate business risk.
CVE-2026-39531
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical flaw in the WP Directory Kit WordPress plugin could let unauthorized individuals steal sensitive customer data from your website's database without needing a password.
CVE-2026-45208
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Trend Micro Apex One agents may allow a local attacker to gain elevated privileges. This requires the attacker to first execute low-privileged code on the system. The business risk includes unauthorized access to and modification of system data and operations.
CVE-2026-45207
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Apex One/SEP agent allows local attackers with low-privileged code execution to escalate privileges. This impacts system confidentiality, integrity, and availability, posing a business risk. Exploitation requires prior access to the target system.
CVE-2026-45206
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An origin validation vulnerability in the Apex One/SEP agent allows a local attacker with low-privileged code execution to escalate privileges. This impacts affected installations, potentially leading to data compromise and system compromise. Business risk is associated with unauthorized access and control over systems
CVE-2026-34930
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Trend Micro Apex One allows a local attacker with low-privileged code execution to escalate privileges. This impacts affected systems by potentially compromising data and system integrity, posing a business risk if exploited. Remediation is advised.
CVE-2026-34929
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
This vulnerability in Trend Micro Apex One allows a local attacker with low-privileged code execution to escalate privileges. Exploitation could lead to unauthorized access and disruption of business operations. The risk to organizations involves potential compromise of sensitive data and system control if the vulnerab
CVE-2026-34928
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Trend Micro Apex One could allow a local attacker with low-privileged code execution to escalate privileges on affected systems. This presents a business risk of unauthorized access and modification of data.
CVE-2026-34927
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A local attacker with low-privileged code execution could escalate privileges on affected Trend Micro Apex One installations. This presents a business risk by potentially compromising protected systems, impacting data confidentiality, integrity, and availability. The risk is considered high due to the potential for pri
CVE-2026-34926
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An internal attacker with server administrative access can exploit Trend Micro Apex One (on-premise) to distribute harmful software to all connected computers. This is critical because it allows the attacker to gain persistent administrative control over all managed company devices.
CVE-2026-2740
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
ManageEngine ADSelfService Plus, DataSecurity Plus, and RecoveryManager Plus have a vulnerability allowing attackers with access to run malicious code on your systems, potentially leading to data compromise. This needs immediate attention.
CVE-2025-71217
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Trend Micro Apex One has a flaw that could let someone with limited access gain full control of your machine. This was fixed in late 2025, so ensure your software is updated.
CVE-2025-71216
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A local attacker with low-privileged code execution could escalate privileges on Trend Micro Apex One (mac) agents. This impacts affected installations by potentially compromising system integrity and data confidentiality. The realistic business risk involves unauthorized access and control on compromised systems.
CVE-2025-71215
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Trend Micro Apex One allows a local attacker to escalate privileges. This could affect systems by enabling unauthorized access and control. The risk to organizations is associated with potential data compromise and system integrity if affected systems are not updated.
CVE-2025-71214
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in Trend Micro Apex One's iCore service may allow a local attacker with existing low-privileged access to escalate privileges, potentially impacting data and system control. This vulnerability requires an attacker to first gain limited code execution on the target system. Affected organizations should assess the
CVE-2025-71213
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Trend Micro Apex One has a serious flaw allowing a local attacker with basic access to gain full control of the system. This is critical because it escalates a minor intrusion into a major security breach on your network.
CVE-2025-71212
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Trend Micro Apex One could let someone with limited system access gain administrative control, allowing them to make major changes to your computers.
CVE-2025-71211
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An external attacker could exploit a flaw in the Trend Micro Apex One management console to gain full control of the system. This would allow them to disable security defenses and take over the endpoints the software manages.
CVE-2025-71210
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Trend Micro Apex One has a security flaw in its management console that allows an external attacker to upload and execute malicious files. This could grant an attacker full administrative control over your security infrastructure, allowing them to disable endpoint defenses and compromise the network.
CVE-2025-13479
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
PosCube's QR Menu has a critical flaw that lets anyone access sensitive data without logging in, and the vendor hasn't responded.
CVE-2025-13477
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
WifiBurada has a flaw allowing unauthorized access to private customer information. This impacts internet-facing services and requires immediate attention due to the potential for data exposure.
CVE-2026-5118
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
The Divi Form Builder plugin for WordPress has a critical vulnerability that allows attackers to create administrator accounts on your website without any authentication, potentially leading to a full site takeover.
CVE-2026-45255
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in FreeBSD's installation and configuration tools allows for code execution as root if a user initiates a Wi-Fi scan. An attacker within radio range could exploit this by creating a rogue access point with a specially crafted name, potentially impacting system integrity and data.
CVE-2026-45253
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in FreeBSD's kernel ptrace functionality allows local users to escalate privileges, potentially gaining full system control. This impacts organizations by exposing systems to unauthorized access and data compromise. The realistic business risk involves loss of system integrity and confidentiality.
CVE-2026-45251
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability in the operating system can be exploited by a local user to gain elevated privileges. This risk is internal, requiring local access to trigger the vulnerability. Organizations should identify affected assets and apply necessary fixes.
CVE-2026-42001
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A problem in PowerDNS Authoritative can let someone crash the service with specially crafted requests, potentially disrupting internet services. This issue is important now because it affects internet-facing systems.
CVE-2026-39461
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in FreeBSD's libcasper library could allow local privilege escalation. An attacker could trigger stack corruption by opening many file descriptors, potentially gaining elevated access if the affected application runs as root. This risk is associated with local access to the system.
CVE-2026-5433
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
By targeting the web interface of the Honeywell Control Network Module, an external attacker can gain full administrative control of the system. This risk could enable them to disrupt critical industrial operations or access broader internal networks.
CVE-2026-4858
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Mattermost has a critical flaw allowing authenticated users to control any API using admin tokens via path traversal, potentially leading to unauthorized actions and data compromise.
CVE-2026-45250
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An internal attacker could gain administrative access to systems by exploiting a flaw in a core system function, potentially allowing them to execute code and take control. This matters as it threatens the integrity and security of business operations.
CVE-2026-44050
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Netatalk has a security flaw that allows an internal attacker with valid credentials to gain full control of the system or crash the service. This could lead to unauthorized access to sensitive files and persistent system compromise, putting business data and operations at risk.
CVE-2026-6279
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
The Avada Builder plugin for WordPress has a critical flaw allowing anyone to run malicious code on your website without logging in, potentially leading to full site takeover.
CVE-2026-9152
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Altium 365's SearchService allows unauthenticated network access to search index operations. This could expose sensitive workspace information and compromise search result integrity. The risk to affected organizations includes data disclosure and manipulation of search results, impacting business ope
CVE-2026-48172
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
LiteSpeed's cPanel plugin has a critical flaw allowing any user with an account to take over your server, and it's already being exploited.