NVD disclosure day
CVE-2026-10156
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Open5GS may lead to resource consumption if an attacker manipulates an argument in the nf-instances Endpoint. This could impact network services by exhausting system resources. The exploit has been publicly disclosed, presenting a potential risk.
CVE-2026-10155
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Bdtask Multi-Store Inventory Management System's Accounts Report Handler allows remote attackers to inject SQL commands, potentially impacting data integrity and access. The exploit is publicly available, posing a risk to organizations using this system.
CVE-2026-10154
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Dolibarr ERP CRM allows for remote authorization bypass by manipulating an ID argument in the user messaging function. This could lead to unauthorized access to systems and data. Upgrading the software resolves this issue.