NVD disclosure day

Published threat advisories for June 13, 2026

CVE-2026-12183

Gas Station Automation Improper Authentication Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

An improper authentication vulnerability in a gas station automation system allows unauthenticated remote attackers to gain administrative control. This could permit unauthorized reading or modification of settings related to user rules, fuel dispensers, pricing, and financial transactions. Readers should care because

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2026-11624

Model Context Protocol DNS Rebinding Vulnerability

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

The Model Context Protocol is vulnerable to DNS rebinding attacks if incoming connections are not validated. This could allow an attacker to trick a user's browser into making unauthorized requests. Newer versions offer configuration options to mitigate this risk.

NVD modified: NVD date unavailable