NVD disclosure day
CVE-2026-55200
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in libssh2 allows remote attackers to execute arbitrary code by sending crafted SSH packets with an invalid packet length, leading to heap memory corruption. This could enable attackers to gain control of affected systems. The exposure of this vulnerability depends on whether the affected software is pr
CVE-2026-54388
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in Tinyproxy that allows remote attackers to desynchronize proxy and backend parser states by sending requests with multiple, differing `Content-Length` headers. This can enable attackers to inject arbitrary HTTP requests to backend systems, potentially leading to cache poisoning, access control
CVE-2026-54387
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Tinyproxy, a web proxy software, where conflicting `Content-Length` and `Transfer-Encoding` headers can lead to desynchronization between the proxy and backend servers. This allows remote attackers to inject arbitrary HTTP requests, potentially enabling cache poisoning, access control
CVE-2026-48814
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Network-AI, a TypeScript/Node.js orchestrator, allows unauthenticated users to invoke administrative tools. This could permit unauthorized control over the system by any network-accessible caller. Confirm relevance and assess exposure.
CVE-2026-55196
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authentication bypass vulnerability in Hermes WebUI allows unauthenticated remote attackers to register arbitrary passkeys when a specific configuration is enabled, potentially leading to permanent administrative control. This issue is relevant if your environment uses Hermes WebUI and its passkey feature is configu
CVE-2026-53805
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
NVIDIA SIL's GEN3C inference API server has a critical vulnerability allowing unauthenticated remote code execution. Attackers can send crafted HTTP requests to specific endpoints, exploiting insecure deserialization to run arbitrary code as the inference process. It's important to identify if this technology is in use
CVE-2026-3894
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical out-of-bounds read vulnerability in RTI Connext Professional's core libraries could allow an attacker to read data beyond buffer limits, potentially leading to information disclosure or service instability. This affects systems using the middleware for data distribution, raising concerns about the relevance
CVE-2026-2467
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A heap-based buffer overflow vulnerability in RTI Connext Professional core libraries could allow for overflow variables and tags. This issue affects multiple versions of the software, which is used for real-time data distribution and may be reachable via network threats. It is uncertain if this technology is in use or
CVE-2026-20266
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in Splunk AI Toolkit that allows an administrator to execute arbitrary OS commands by constructing unsafe shell commands from dynamic parameters. This could lead to compromise of the Splunk Enterprise server.
CVE-2026-53874
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A deserialization vulnerability in picklescan allows unauthenticated code execution via crafted pickle files. This could enable attackers to run arbitrary code when the tool loads malicious data from untrusted sources. Security leaders should verify if this tool is used and processes external data.
CVE-2026-53873
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in picklescan allows arbitrary code execution via the profile module, bypassing security checks. Attackers can craft malicious pickle files to run unauthorized Python code undetected by the tool, posing a risk to the integrity of systems processing these files. This issue is relevant for development and
CVE-2026-3490
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the picklescan code analysis tool allows remote attackers to bypass blocklists and execute arbitrary code by resolving dangerous functions through indirect calls. This could lead to unauthorized system control if the tool is used in a reachable environment. This issue may impact systems employing pic
CVE-2026-36418
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
JimuReport's reporting API has a critical vulnerability allowing remote code execution due to improper handling of Aviator expressions. If reachable, an attacker could execute arbitrary code, potentially leading to system compromise. Confirming its use and exposure is crucial.
CVE-2026-20181
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Cisco Identity Services Engine (ISE) and ISE-PIC allows authenticated attackers with administrative credentials to execute arbitrary commands on the underlying operating system. This could lead to unauthorized access, privilege escalation to root, and potentially a denial of service impacting network
CVE-2025-71325
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A parsing logic error in the picklescan tool allows malicious pickle files to bypass detection. This means the tool, intended to find malicious pickle files, may fail to identify them under certain conditions, potentially allowing undetected malicious files to pose a risk. The relevance and exposure of this tool within
CVE-2025-71323
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in picklescan allows remote code execution by enabling attackers to bypass security measures through specially crafted pickle files. This could lead to unauthorized command execution and memory access if the technology is used in a reachable context. Determining the presence and usage of pickle
CVE-2025-71321
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in picklescan that allows arbitrary file writing, potentially enabling attackers to overwrite critical system files and cause denial of service or remote code execution. Readers should care to determine if this technology is in use and accessible.
CVE-2025-71320
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in picklescan allows attackers to bypass security checks by crafting malicious pickle files, potentially leading to arbitrary code execution during deserialization. The affected technology is picklescan, a developer tool, and the concern is whether it is used in environments where it might process untru
CVE-2026-55743
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the OpenHuman desktop agent allows bypassing its command allowlist to execute arbitrary OS commands with user privileges. This can occur when the agent processes malicious content, leading to potential remote code execution, data exfiltration, and system compromise. Confirmation of the agent's presen
CVE-2026-54812
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in the StylemixThemes Motors plugin, allowing unauthenticated attackers to potentially extract sensitive database information or cause service disruptions. Since the plugin is designed for public-facing automotive dealership and classified listing websites, it is likely acc
CVE-2026-47103
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Python StateMachine library allows remote code execution when processing malicious SCXML documents. Attackers can exploit this by supplying crafted documents that cause arbitrary code to run within the application's process. The reachability of this vulnerability depends on how the library is imp
CVE-2026-42530
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in NGINX Open Source's HTTP/3 QUIC module, potentially allowing unauthenticated remote attackers to cause a denial-of-service or execute code. This occurs through a specially crafted HTTP/3 session that triggers a use-after-free condition, leading to a worker process restart or, under sp
CVE-2026-42055
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A heap-based buffer overflow in NGINX proxy modules may allow an attacker to cause a service restart or execute code under specific, complex conditions. This vulnerability affects NGINX when using certain proxy configurations for HTTP/2 or gRPC traffic with large client headers. Understanding the relevance and exposure
CVE-2026-54819
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability in the Listdom component could permit attackers to execute unauthorized database commands. If reachable, this may lead to unintended data access or service disruption. Confirming Listdom deployment and external exposure is crucial for assessing risk.
CVE-2026-54815
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability in the Cargo Shipping Location for WooCommerce plugin allows attackers to access sensitive database information. The vulnerability is reachable via the network and can be exploited by unauthenticated attackers, potentially leading to unauthorized data exposure on e-commerce sites.
CVE-2026-54809
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability in the GIFT4U WordPress plugin allows attackers to inject malicious SQL commands. If reachable, this could lead to unauthorized access to or manipulation of sensitive data. Confirming the use of this plugin and assessing potential data exposure is crucial.
CVE-2026-54808
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in WP Travel Gutenberg Blocks, allowing attackers to potentially access and modify sensitive database information. This issue is relevant to public-facing WordPress sites using the plugin, as it could lead to unauthorized data exposure or tampering without requiring special access o
CVE-2026-49108
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in the Moderno web theme. This flaw allows remote attackers to execute arbitrary code, potentially leading to a full system compromise if the theme is reachable. Understanding the presence and reachability of this theme is important for assessing risk.
CVE-2025-69127
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in Plumbing software, potentially allowing remote attackers to inject malicious PHP objects. This could lead to arbitrary code execution and a complete compromise of the affected server. It is important to confirm if Plumbing software is in use and assess its
CVE-2025-69111
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical PHP object injection vulnerability exists in the Reisen theme, allowing unauthenticated attackers to potentially execute code. This affects external-facing web applications, posing a significant risk of system compromise if reachable. Readers should confirm relevance and understand potential exposure.
CVE-2025-60236
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A deserialization vulnerability in the EMV Creatify WordPress theme allows for object injection. If reachable, an attacker could exploit this by sending specially crafted data, potentially leading to the execution of malicious code or system compromise. Readers should care because this is a critical flaw in an internet
CVE-2025-60231
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A deserialization vulnerability in The Hospital WordPress theme allows object injection, potentially enabling attackers to compromise system integrity. This issue affects the theme's handling of untrusted data, making it a target for malicious code injection if reachable.
CVE-2025-60230
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A deserialization of untrusted data vulnerability in The Barber Shop theme allows object injection, potentially enabling unauthorized code execution on affected systems. This critical issue requires immediate attention due to its network-accessible nature and potential to compromise system integrity and availability.
CVE-2025-60229
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A deserialization flaw in the Themeton Lagom WordPress theme allows attackers to inject malicious objects. If reachable, this could enable arbitrary code execution, potentially impacting system integrity and availability. Readers should care because this critical vulnerability can be exploited remotely without authenti
CVE-2025-59554
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the Advanced Ads – Tracking WordPress plugin, potentially allowing attackers to access or modify database information. This issue requires attention to understand its relevance and potential impact on your systems.
CVE-2026-54811
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in a WordPress membership plugin that could allow attackers to access or manipulate sensitive database information. The concern is whether this plugin is used in your environment, as it could expose member and access control data.
CVE-2026-54807
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in a WooCommerce registration form plugin, allowing unauthenticated attackers to gain elevated privileges. This issue impacts public-facing websites and could lead to unauthorized administrative access if the plugin is in use and reachable.
CVE-2026-54806
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in the WP Activity Log plugin, potentially allowing attackers to compromise affected websites by injecting and executing arbitrary PHP objects. This could lead to unauthorized control, data manipulation, or service disruption.
CVE-2026-54803
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical privilege escalation vulnerability affects SMS Alert Order Notifications, potentially allowing unauthorized users to gain higher system privileges without authentication. This issue presents a significant security risk if the affected software is accessible over the network. Confirming the presence and usage
CVE-2026-54194
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A PHP Object Injection vulnerability in Fusion Builder can allow attackers to execute arbitrary code remotely, potentially compromising affected systems. The issue does not require authentication or user interaction for exploitation. It is uncertain if this component is in use or exposed in your environment.
CVE-2026-54187
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical unauthenticated SQL injection vulnerability exists in the JetEngine WordPress plugin. Attackers can exploit this flaw remotely to inject malicious SQL commands, potentially leading to unauthorized access and manipulation of sensitive database information. This poses a risk to data integrity and confidentiali
CVE-2026-54186
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in JobSearch, allowing attackers to execute arbitrary SQL commands on the database. This could lead to unauthorized access to or modification of sensitive data if the affected component is reachable online. Understanding if this software is in use and its exposure i
CVE-2026-52706
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in JetEngine that could allow unauthenticated attackers to inject PHP code over the network. If reachable, this could lead to arbitrary code execution on the server, impacting website data and integrity. Confirming if JetEngine is in use and exposed is essential to assess and address pot
CVE-2026-52705
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
This critical vulnerability allows unauthenticated users to upload arbitrary files using SigmaForms Pro's AI-generated forms, potentially leading to severe security breaches. If this technology is relevant and reachable in our environment, it could impact website integrity and service availability by enabling the execu
CVE-2026-50203
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A path traversal vulnerability in the SFTP provider allows a malicious or compromised SFTP server to write files outside the designated local directory. This could affect any deployment downloading directories from untrusted SFTP servers, as no Airflow account is required to exploit it.
CVE-2026-49767
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical authentication vulnerability exists in the wpForo Forum plugin, allowing unauthenticated access to forum data and functions. This could lead to unauthorized control and compromise of user information. Assess plugin usage and network exposure.
CVE-2026-49107
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical unauthenticated PHP Object Injection vulnerability exists in Thrive Apprentice, a WordPress plugin, enabling attackers to potentially compromise systems without authentication. This vulnerability is reachable via the network and could lead to severe data compromise if exploited. Action is needed to determine
CVE-2026-49084
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in JetEngine, potentially allowing attackers to access or manipulate sensitive database information. This issue is classified as external and likely reachable from the internet, posing a risk to data integrity and confidentiality. Confirming the presence and reachab
CVE-2026-49080
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in the wpDataTables WordPress plugin, allowing unauthenticated attackers to potentially access sensitive database information. This issue is network-exposed and does not require user interaction for exploitation. The primary concern is confirming the plugin's presence and r
CVE-2026-49079
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the JetSearch plugin, potentially allowing attackers to access or modify sensitive database information. This could impact data confidentiality and integrity if the plugin is publicly reachable.
CVE-2026-49076
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the JetEngine plugin, potentially allowing attackers to access or manipulate data without authentication. This could lead to unauthorized data exposure or system compromise if the plugin is exposed to the network.
CVE-2026-49075
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical PHP object injection vulnerability exists in JetEngine, a WordPress plugin. If reachable, an unauthenticated attacker could inject and execute arbitrary PHP code, potentially compromising system data and integrity. This vulnerability could allow remote code execution and impact website security.
CVE-2026-49058
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in LoginPress Pro that allows unauthenticated attackers to escalate their privileges. This means an attacker could gain higher access levels without needing to log in, potentially impacting user authentication processes. It is important to determine if this plugin is used and accessible
CVE-2026-48875
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in a widely used website filtering plugin, potentially allowing attackers to access or manipulate database information without logging in. This could impact data integrity and security on affected sites, necessitating confirmation of its presence and assessment of p
CVE-2026-48797
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The Backpropagate library's web UI, intended for fine-tuning large language models, can expose training controls without authentication when accessible over a network. An attacker could leverage this to upload datasets, manipulate models, and trigger denial-of-service conditions, impacting data and system availability.
CVE-2026-48781
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Postiz, an AI social media scheduling tool, allows an authenticated user to forge administrative credentials. This can lead to unauthorized full access to the application, including user data and the ability to post from impersonated social media channels. The issue is related to the handling of sign
CVE-2026-48745
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Traccar Client mobile app allows a crafted link to secretly hijack GPS tracking parameters and redirect telemetry to an attacker-controlled server. This happens when a user taps a malicious deep link, silently reconfiguring the app without confirmation, leading to continuous, real-time location t
CVE-2026-48055
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Streambert's subtitle extraction logic contains a Zip Slip vulnerability that allows attackers to write arbitrary files to the host filesystem if a malicious archive is processed. This could lead to system compromise.
CVE-2026-42380
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability has been identified in AI Lab, a critical issue that could allow an attacker to inject malicious objects. If reachable, this vulnerability may lead to unauthorized control, sensitive information disclosure, data modification, or service disruption. Confirming the pr
CVE-2026-40783
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical contributor remote code execution vulnerability exists in the Blocksy Companion Pro plugin, allowing for arbitrary code execution on the server. This affects websites built with the plugin, which are commonly exposed to the internet, potentially impacting data integrity and availability. Readers should care
CVE-2026-40749
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in Charity Zone themes, allowing low-privileged users to upload arbitrary files. If reachable, this could lead to code execution and unauthorized access to sensitive information. This impacts web applications using the affected theme.
CVE-2026-40748
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in the Kids Gift Shop theme, allowing authenticated subscribers to upload malicious files to the server. If reachable, this could lead to system compromise. Website owners should verify its presence and address it if in use.
CVE-2026-40747
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in the Ecommerce Zone theme, potentially allowing authenticated subscribers to upload malicious files. If reachable, this could lead to system compromise and unauthorized code execution. Further assessment is needed to understand the specific business impact and rel
CVE-2026-40746
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in the Restaurant Zone theme. If reachable, an attacker with low-privileged access could upload malicious files, potentially leading to unauthorized code execution and system compromise. Confirming the use and exposure of this theme is crucial.
CVE-2026-40725
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in WooCommerce Product Filters, potentially allowing attackers to execute arbitrary code. This could impact website data and functionality. Confirming relevance and exposure is advised for affected e-commerce platforms.
CVE-2026-39596
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in the Blocksy Companion Pro plugin that allows unauthenticated attackers to execute arbitrary SQL commands. If reachable, this could lead to unauthorized access to sensitive database information or service disruption. This issue is relevant because it affects a widely used
CVE-2026-39589
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in the Webenvo theme, potentially allowing unauthorized access and compromise of websites. An attacker could leverage this to upload malicious files, impacting system integrity and availability. It is important to verify if your organization uses this theme and asse
CVE-2026-39529
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in the Elementra WordPress theme. Attackers can exploit this by sending crafted data, potentially leading to arbitrary code execution and severe system compromise. Confirming the presence and exposure of this theme within your environment is crucial.
CVE-2026-39438
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the ListingPro plugin, potentially allowing attackers to access or modify sensitive data. This external threat requires immediate assessment to understand its presence and criticality within your environment.
CVE-2026-32967
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An incorrect authorization flaw exists in Apache DolphinScheduler's experimental `/v2` interface. This vulnerability, if reachable, could allow unauthenticated users to gain unauthorized access and potentially modify data. This impacts workflow orchestration platforms and warrants attention to assess exposure and plan
CVE-2026-32966
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Apache DolphinScheduler due to a missing authorization check in its DataSource API. This allows unauthenticated users to disclose sensitive data source metadata, potentially impacting system integrity and confidentiality.
CVE-2026-28615
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A permissions bypass in telecommunication functions allows unauthorized phone calls and local privilege escalation without user interaction, posing a risk if reachable or relevant within the environment. The exact telecommunication functions impacted are not specified, leading to uncertainty regarding the scope and bus
CVE-2026-28587
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in Android's MmsSmsProvider, allowing sensitive local information disclosure due to a missing permission check. Exploitation requires no user interaction or special privileges, but the impact is limited to data accessible on the device. Confirming affected devices and assessing business
CVE-2026-28576
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A SQL injection vulnerability in the Contacts Provider allows unauthorized local information disclosure without requiring user interaction or additional privileges. This could potentially expose sensitive contact data. Confirming relevance and exposure within your environment is advised.
CVE-2026-28575
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A logic error in Android's PackageInstaller can cause memory exhaustion, leading to a local denial of service. This vulnerability does not require special access or user interaction to exploit, potentially impacting device operations. The attack vector is local, suggesting a limited external threat.
CVE-2026-27429
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in the Nifty WordPress theme. Attackers can exploit this by sending specially crafted requests, potentially leading to remote code execution. This could impact system data and service behavior. Confirming theme usage and external exposure is crucial for asses
CVE-2026-27395
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical unauthenticated privilege escalation vulnerability exists in Support Board, allowing attackers to gain administrative control. This impacts the software's ability to secure system functions and data, necessitating an assessment of its use and potential exposure.
CVE-2026-27041
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A WordPress plugin allows contributor-level users to upload arbitrary files, potentially enabling unauthorized code execution or site compromise. The risk is amplified because this plugin extends website functionality, making it a core component of public-facing web applications. Confirmation of its use and exposure on
CVE-2026-25470
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical code injection vulnerability exists in a WordPress plugin that creates custom post types, potentially allowing remote code inclusion. If reachable, an attacker could execute arbitrary code on the server, impacting site integrity and data. Confirmation of the plugin's usage and its internet accessibility with
CVE-2026-25446
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in the WishList Member X plugin, allowing authenticated users to upload malicious files, potentially leading to website compromise. This vulnerability is externally reachable, posing a risk to web application integrity and availability.
CVE-2026-24611
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in MetForm Pro, a WordPress plugin, allowing unauthenticated attackers to bypass access controls. This could lead to unauthorized access to sensitive data and disruption of service. Confirming its use is essential to understand potential business risk.
CVE-2026-22340
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the WPJobster WordPress theme. If reachable, an attacker could send malicious SQL queries to access or modify sensitive data, impacting database integrity and availability. It is important to determine if this theme and version are in use within your web presence
CVE-2026-22332
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability in Tutor LMS Pro could allow attackers to access or modify sensitive database information. This poses a risk to data confidentiality and integrity. It is important to determine if this plugin is in use and assess its exposure.
CVE-2026-22327
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the Restaurt theme allows authenticated users to upload arbitrary files, potentially leading to system compromise. If the theme is in use and reachable, attackers could execute malicious code or alter application behavior, posing a risk to integrity and confidentiality. Confirming usage and
CVE-2026-12440
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A "use after free" vulnerability in Google Chrome's DigitalCredentials component on Windows could allow a remote attacker to escape the browser's sandbox by tricking a user into visiting a malicious HTML page. This could potentially lead to unauthorized access to system resources or sensitive information.
CVE-2026-10094
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A path traversal vulnerability in SOLIDWORKS Visualize may permit an attacker to write arbitrary files to servers. This could impact system integrity and availability. Please confirm if this technology is relevant to your operations and assess potential exposure.
CVE-2026-0092
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in the Android Package Manager that allows for privilege escalation without user interaction. This bypasses device lock controls, potentially impacting device integrity and stored data. The affected technology is a core component of the Android operating system, making it relevant for ov
CVE-2026-0083
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Android's NFC component could allow local privilege escalation through a use-after-free error caused by a race condition. This flaw is reachable and relevant for local attacks, and requires no user interaction or additional privileges to exploit, potentially impacting system data and service behavior
CVE-2026-0082
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Android's NFC component may allow for automatic special app access permission assignment, leading to local privilege escalation without user interaction. This could potentially affect system and user data by granting elevated privileges.
CVE-2026-0081
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in NFC technology allows an attacker to spoof NFC events due to a missing permission check, potentially leading to local privilege escalation. This could impact system integrity and availability. The relevance and exposure of affected systems need to be confirmed.
CVE-2026-0071
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A logic error in SettingsLib could allow local privilege escalation without further privileges or user interaction, potentially impacting system integrity. The vulnerability's reachability is assessed as very unlikely due to its internal, non-network accessible nature.
CVE-2026-0068
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Android Package Installer Service that could allow a malicious app to remove a DPC app without consent, potentially leading to local privilege escalation. Exploitation requires local access and user interaction to install a malicious application. Confirming relevance and exposure on manage
CVE-2026-0064
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists that allows for a persistent denial of service through resource exhaustion. This could disrupt local systems without needing special privileges or user interaction, impacting service availability. The relevance and exposure to our environment are currently uncertain.
CVE-2026-0063
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A logic error in Android's phone interface manager allows for disabling carrier restrictions, potentially leading to local privilege escalation on a device. This vulnerability does not require user interaction or network access. Confirmation is needed to determine the specific relevance and reachability of this flaw wi
CVE-2025-69179
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated privilege escalation vulnerability exists in a Support Ticket Management System plugin, potentially allowing network-accessible attackers to gain elevated system access. This could lead to unauthorized modification of sensitive ticket data, impacting customer support portal security.
CVE-2025-69129
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability allows unauthenticated arbitrary file uploads in a WordPress and WooCommerce plugin, potentially leading to site compromise and malicious code execution. It is uncertain if this plugin is used within the organization, requiring confirmation to assess relevant risk.
CVE-2025-69122
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP object injection vulnerability exists in SeaFood Company software, potentially enabling attackers to execute arbitrary PHP code remotely. This occurs when the application processes untrusted data, leading to the unserialization of malicious PHP objects, which could compromise the integrity and av
CVE-2025-69108
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in the Hot Coffee WordPress theme. This flaw could allow remote attackers to inject malicious PHP objects without needing credentials, potentially leading to unauthorized access, data manipulation, or denial of service. It is important to determine if this th
CVE-2025-60218
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in PT Luxa Addons, potentially allowing authenticated attackers to compromise affected websites. This issue, rated critical, could impact system integrity and availability if exploited.
CVE-2025-60205
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in ThemeREX Addons, potentially allowing attackers to execute arbitrary code. Confirmation of its presence and reachability within our environment is necessary to assess risk and plan remediation.
CVE-2025-59872
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unrestricted file upload vulnerability in HCL ZIE for Web could allow an attacker to achieve command execution on the server by uploading a web shell. This is possible if the server is configured to execute code from files uploaded into the Webroot.
CVE-2024-52488
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability in the Grip WordPress theme enables unauthenticated users to upload and potentially execute files. This could lead to arbitrary code execution and system compromise if the theme is used and reachable.
CVE-2026-48776
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
The LangGraph Python SDK has a vulnerability where unsanitized identifier values used in HTTP request paths can lead to unintended resource access, modification, or deletion. This is a risk in deployments that pass end-user-supplied values directly into SDK identifier parameters without validation and rely on upstream
CVE-2026-46978
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Solaris allows unauthenticated attackers with network access via HTTPS to modify or access critical data. While the vulnerability is in Oracle Solaris, attacks may impact additional products, potentially leading to unauthorized data access, modification, or deletion. Further analysis
CVE-2026-46964
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Oracle Universal Work Queue, part of Oracle E-Business Suite, could allow a low-privileged attacker with network access to compromise the system, potentially impacting other products and leading to a full takeover.
CVE-2026-46963
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Universal Work Queue allows low-privileged attackers with network access to compromise the system, potentially leading to a full takeover and impacting other products. This issue affects confidentiality, integrity, and availability.
CVE-2026-46949
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Oracle Advanced Outbound Telephony could allow an unauthenticated attacker with network access to compromise the system, leading to unauthorized modification or access to critical data. This impacts the confidentiality and integrity of Oracle Advanced Outbound Telephony accessible data.
CVE-2026-46946
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in Oracle iSupport could allow a highly privileged attacker with network access to take over the system, potentially impacting other products. This issue affects Oracle E-Business Suite.
CVE-2026-46945
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in Oracle iSupport, allowing a highly privileged attacker with network access to potentially take over the system and impact other connected products. The issue is reachable via HTTP and could lead to a significant compromise of the iSupport application.
CVE-2026-46944
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle iSupport allows highly privileged attackers with network access to take over the system and potentially impact other connected products. This affects Oracle E-Business Suite versions 12.2.3 through 12.2.15. The issue has a CVSS score of 9.1, indicating high impacts to confidentiality,
CVE-2026-46933
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in Oracle Applications Manager, part of Oracle E-Business Suite, allows a low-privileged attacker with network access to take control of the system. Successful exploitation could impact additional products and lead to significant confidentiality, integrity, and availability losses. Readers shou
CVE-2026-46930
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle In-Memory Cost Management for Discrete Industries, allowing unauthenticated network attackers to gain unauthorized access or modify critical data. This issue could lead to unauthorized creation, deletion, or modification of data, or complete access to all accessible data within
CVE-2026-46919
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle Siebel CRM Cloud Applications' Siebel Cloud Manager component that allows unauthenticated attackers with network access to completely compromise the application. Successful exploitation could lead to a full takeover, impacting data confidentiality, integrity, and availability.
CVE-2026-46918
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in Oracle Process Manufacturing Product Development, part of Oracle E-Business Suite, allows low-privileged attackers with network access to achieve a complete takeover of the system and potentially impact other products.
CVE-2026-46912
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in JD Edwards EnterpriseOne Tools' Web Runtime Security component, allowing unauthenticated attackers with network access to potentially gain unauthorized access to critical data or modify existing information. This issue may also impact other connected products, making it important to a
CVE-2026-46911
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in Oracle JD Edwards EnterpriseOne Project Costing that could allow a low-privileged attacker with network access to modify, delete, or gain unauthorized access to critical project and financial data. The exploit's impact may extend to other JD Edwards products.
CVE-2026-46910
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in Oracle JD Edwards EnterpriseOne Tools that could allow an unauthenticated attacker with network access to obtain unauthorized access to critical data or cause system crashes, impacting both confidentiality and availability. Because the issue is reachable via HTTP, it poses a risk to b
CVE-2026-46909
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle JD Edwards EnterpriseOne Tools that allows an unauthenticated attacker with network access to take over the affected system. This could impact the confidentiality, integrity, and availability of the product.
CVE-2026-46908
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle JD Edwards EnterpriseOne Accounts Payable, allowing a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation could lead to a takeover of the Accounts Payable functionality and potentially impact other connected products, with sign
CVE-2026-46907
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle JD Edwards EnterpriseOne Order Promising integration could allow a low-privileged attacker with network access to take over the system. Successful exploitation may impact additional products, leading to significant risks.
CVE-2026-46906
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle's JD Edwards EnterpriseOne Tools allows a low-privileged attacker with network access to compromise critical data. Successful exploitation could lead to unauthorized creation, deletion, or modification of sensitive information, potentially impacting additional JD Edwards products. Thi
CVE-2026-46905
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle JD Edwards EnterpriseOne Tools' Web Runtime Security component allows unauthenticated network attackers to achieve a full system takeover. This easily exploitable issue, accessible via HTTP, could impact confidentiality, integrity, and availability. Confirming the relevance and exposu
CVE-2026-46904
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle JD Edwards EnterpriseOne Tools, allowing unauthenticated network attackers to take over the system. This impacts confidentiality, integrity, and availability. It is important to determine if your organization uses the affected technology and assess potential exposure.
CVE-2026-46902
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Enterprise Command Center Framework allows unauthenticated network attackers to take over the system. This could expose sensitive information and grant full control over the framework. Its network-accessible nature makes it a significant risk.
CVE-2026-46901
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability exists in the Oracle Enterprise Command Center Framework, part of Oracle E-Business Suite, allowing a low-privileged attacker with network access to compromise the framework. This could lead to unauthorized access, modification, or deletion of critical data, and potentially a partial denial of service,
CVE-2026-46900
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Oracle Enterprise Command Center Framework could allow a low-privileged attacker with network access to take over the framework, potentially impacting other connected products. This could lead to significant loss of confidentiality, integrity, and availability.
CVE-2026-46899
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Enterprise Command Center Framework, part of Oracle E-Business Suite, allows a low-privileged attacker with network access to compromise the framework. This could result in unauthorized modification or access to critical data, potentially impacting additional Oracle products. Organiza
CVE-2026-46897
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle Enterprise Command Center Framework, potentially allowing unauthorized access to and modification of critical data, as well as a partial denial of service. Successful exploitation, achievable by a low-privileged attacker with network access, could impact additional Oracle produ
CVE-2026-46896
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Enterprise Command Center Framework allows a highly privileged attacker with network access to compromise the framework, potentially impacting other products. Exploitation could lead to a full takeover of the framework.
CVE-2026-46895
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Enterprise Command Center Framework could allow a low-privileged attacker with network access to take over the framework, potentially impacting other products. This issue affects specific supported versions.
CVE-2026-46893
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Oracle JD Edwards EnterpriseOne General Ledger allows low-privileged attackers with network access to compromise the system, potentially impacting other products and leading to a full takeover. The exact business impact and relevance in your environment are currently under analysis.
CVE-2026-46892
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle JD Edwards EnterpriseOne Human Resources Management allows unauthenticated attackers with network access to compromise critical data. This could result in unauthorized creation, deletion, or modification of sensitive HR information.
CVE-2026-46890
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Siebel CRM's Marketing component allows unauthenticated attackers with network access to take over the system, impacting confidentiality, integrity, and availability. This poses a significant risk to business operations due to the ease of exploitation and the value of enterprise CRM s
CVE-2026-46889
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle Siebel CRM's Marketing component, allowing unauthenticated network access via HTTP to potentially lead to a complete system takeover. This issue affects supported versions of Siebel Apps - Marketing and requires investigation to determine if your environment is exposed.
CVE-2026-46887
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Siebel CRM's Marketing component allows unauthenticated network attackers to take over the system via HTTP. This impacts Confidentiality, Integrity, and Availability, potentially leading to a complete compromise of the marketing functionality.
CVE-2026-46884
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Siebel CRM Marketing allows unauthenticated network attackers to achieve complete system takeover, impacting data confidentiality, integrity, and availability. This issue is exploitable via HTTP, posing a significant risk if the affected technology is reachable. Uncertainty exists reg
CVE-2026-46883
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in JD Edwards EnterpriseOne Tools allows unauthenticated network attackers to compromise the system, potentially leading to a complete takeover. This issue affects confidentiality, integrity, and availability.
CVE-2026-46882
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in Oracle JD Edwards EnterpriseOne Tools allows unauthenticated attackers with network access to take over the system. This could impact confidentiality, integrity, and availability.
CVE-2026-46881
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle JD Edwards EnterpriseOne Tools' Enterprise Infrastructure Security component allows unauthenticated network attackers to achieve complete system takeover. This could impact confidentiality, integrity, and availability.
CVE-2026-46880
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle JD Edwards EnterpriseOne Tools allows unauthenticated network attackers to achieve a complete takeover of the system. This issue impacts the Enterprise Infrastructure Security component and could compromise data confidentiality, integrity, and availability. You should care because thi
CVE-2026-46879
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle JD Edwards EnterpriseOne Tools that could allow an unauthenticated attacker with network access to completely take over the system. This affects confidentiality, integrity, and availability.
CVE-2026-46878
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle JD Edwards EnterpriseOne Tools, allowing unauthenticated network attackers to gain complete control of the system, impacting confidentiality, integrity, and availability.
CVE-2026-46875
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in Oracle Enterprise Manager Base Platform's Deployment Library component. An attacker with high privileges and network access via HTTPS could exploit this to take over the platform, potentially affecting other connected products. This could impact confidentiality, integrity, and availab
CVE-2026-46873
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in Oracle VM VirtualBox's VMSVGA device that could allow a highly privileged attacker with local access to compromise the product. Successful exploitation may lead to a takeover of Oracle VM VirtualBox and potentially impact other products.
CVE-2026-46872
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in Oracle Enterprise Manager Base Platform's installation component, allowing a high-privilege attacker with network access to compromise the platform. This could lead to unauthorized data modification or deletion, unauthorized data reading, or denial of service by causing the platform to crash.
CVE-2026-46861
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Oracle MySQL NDB Cluster's NDB Operator component could allow a low-privileged attacker with network access to compromise the cluster. Successful exploitation may result in unauthorized access, modification, or deletion of critical data, with potential impact on other products. Uncertainty exists reg
CVE-2026-46860
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle's MySQL Router allows unauthenticated attackers with network access to take over the router. This easily exploitable issue could impact the confidentiality, integrity, and availability of the router and its managed services. Confirming if MySQL Router is in use is essential.
CVE-2026-46859
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Agile PLM allows unauthenticated attackers with network access to compromise the system and achieve a full takeover. This could impact business operations by affecting confidentiality, integrity, and availability. It is important to determine if Oracle Agile PLM is in use and exposed
CVE-2026-46858
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle Enterprise Manager's Application Performance Management component, allowing unauthenticated network attackers to gain unauthorized access, modify or delete critical data, and cause denial of service. This issue impacts both data integrity and system availability, necessitating
CVE-2026-46857
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Enterprise Manager Base Platform allows unauthenticated network attackers to compromise the system, potentially leading to a complete takeover. This issue affects the confidentiality, integrity, and availability of the platform and its managed resources, making it a significant concer
CVE-2026-46856
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Enterprise Manager Base Platform, reachable via network access, can allow an unauthenticated attacker to take over the system after user interaction. This could significantly impact additional products.
CVE-2026-46855
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle Enterprise Manager Base Platform that allows a low-privileged attacker with network access to compromise the system. Successful exploitation could lead to a complete takeover of the platform and potentially impact other connected products, affecting confidentiality, integrity,
CVE-2026-46854
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Enterprise Manager Base Platform allows a low-privileged attacker with network access to compromise the system. Successful exploitation could lead to a complete takeover of the platform, impacting other connected products and potentially causing significant data loss or unauthorized a
CVE-2026-46853
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle Enterprise Manager Base Platform, allowing unauthenticated attackers with network access to achieve platform takeover through user interaction. This issue could impact additional products beyond the Base Platform itself, necessitating a review of affected instances and their cr
CVE-2026-46852
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Oracle Enterprise Manager Base Platform allows a low-privileged attacker with network access to take over the platform and potentially impact other products. This could lead to a complete compromise of confidentiality, integrity, and availability.
CVE-2026-46850
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in MySQL Shell for VS Code, allowing a low-privileged attacker with network access to compromise the shell and potentially affect other products. This easily exploitable flaw could lead to a complete takeover of MySQL Shell, impacting confidentiality, integrity, and availability.
CVE-2026-46847
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Portal that allows a low-privileged attacker with network access to take over the system. Successful exploitation can lead to significant impacts on confidentiality, integrity, and availability, potentially affecting other connected products.
CVE-2026-46846
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Portal, allowing unauthenticated attackers with network access to potentially take over the system, impacting its confidentiality, integrity, and availability, as well as other connected products.
CVE-2026-46845
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Portal allows unauthenticated attackers with network access to compromise the application, potentially leading to a complete takeover. This could impact confidentiality, integrity, and availability, making it crucial to determine if this technology is in use and exposed.
CVE-2026-46844
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Portal's security framework, allowing a low-privileged attacker with network access to achieve full takeover of the portal and potentially impact other connected products.
CVE-2026-46838
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Portal could allow a low-privileged attacker with network access to take over the system, potentially impacting other connected products. This issue poses a risk to the confidentiality, integrity, and availability of the portal.
CVE-2026-46832
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Oracle Enterprise Manager Base Platform's Discovery Framework allows a low-privileged attacker with network access to compromise the platform, potentially impacting other connected products. Successful exploitation could lead to a full takeover of the Oracle Enterprise Manager Base Platform. This iss
CVE-2026-46814
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Portal's Security Framework could allow a low-privileged attacker with network access to take over the portal and potentially impact other connected products.
CVE-2026-46813
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content allows unauthenticated attackers with network access to take over the affected system, potentially impacting confidentiality, integrity, and availability. Readers should care because this could lead to a complete system takeover if the product is exposed.
CVE-2026-46809
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Sites that allows unauthenticated attackers with network access to gain unauthorized control over critical data, including creation, deletion, modification, or complete access. This issue, which is reachable via HTTP, could significantly impact data confidentiality an
CVE-2026-46807
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability in Oracle Identity Manager allows unauthenticated network attackers to achieve a full takeover of the system. This issue impacts the confidentiality, integrity, and availability of identity management services.
CVE-2026-46805
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Content, allowing unauthenticated attackers to gain unauthorized access to critical data or modify/delete it. Exploitation requires network access and user interaction, potentially impacting other products. This issue is significant for organizations relying on this c
CVE-2026-46803
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Portal allows unauthenticated network attackers to compromise the system, potentially leading to a complete takeover that may affect other connected products. This issue carries the highest severity score due to significant impacts on confidentiality, integrity, and availabi
CVE-2026-46802
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Portal allows a low-privileged attacker with network access to compromise the system. Successful exploitation can lead to a complete takeover of the portal and potentially impact other connected products. This issue warrants attention due to its high severity and the potenti
CVE-2026-46801
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Sites allows unauthenticated network attackers to fully compromise the system, potentially impacting confidentiality, integrity, and availability. Attackers can exploit this by sending crafted HTTP requests, leading to a complete takeover of the affected application. This po
CVE-2026-46800
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Sites allows unauthenticated attackers to compromise the system via network access, potentially leading to a complete takeover and impacting other products. This issue is easily exploitable and carries the highest severity score, necessitating an understanding of its potenti
CVE-2026-46799
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Sites allows unauthenticated attackers with network access to gain complete control of the system. This could compromise the confidentiality, integrity, and availability of the affected content management platform.
CVE-2026-46798
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Sites allows unauthenticated attackers with network access via HTTP to compromise the application, potentially leading to a complete takeover and impacting additional products. This issue, with a CVSS score of 10.0, affects confidentiality, integrity, and availability.
CVE-2026-46797
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Sites that allows an unauthenticated attacker with network access to take over the system, impacting confidentiality, integrity, and availability. Organizations using this product should confirm its presence and exposure to external networks.
CVE-2026-46795
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content allows an unauthenticated attacker with network access to gain unauthorized access to, or modify, critical data. This could also impact other connected products.
CVE-2026-46794
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Oracle Fusion Middleware's Identity Manager Connector allows a low-privileged attacker with network access via SSH to compromise the connector. This could lead to a complete takeover of the Identity Manager Connector and potentially impact other integrated products, affecting confidentiality, integri
CVE-2026-46793
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Fusion Middleware's Identity Manager Connector could allow a low-privileged attacker with network access to take over the connector, potentially impacting other connected products. This vulnerability, easily exploitable via HTTP, poses a significant risk to confidentiality, integrity,
CVE-2026-46792
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle's Identity Manager Connector allows a low-privileged attacker with network access to potentially take over the connector, impacting other products and systems. <tool_code print(google_search.search(queries=["Oracle Identity Manager Connector Generic Unix Connector vulnerability", "Ora
CVE-2026-46789
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content could allow unauthenticated attackers to take over the system via network access, requiring user interaction. This could impact the confidentiality, integrity, and availability of content management and potentially other connected products.
CVE-2026-46786
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content allows unauthenticated network attackers to take over the system, potentially impacting other products. Exploitation requires user interaction and can lead to full system compromise. This issue is reachable externally and warrants attention due to its potential scope
CVE-2026-46785
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Content, allowing unauthenticated network attackers to modify or access sensitive data. Exploitation requires user interaction and can impact other products. This could lead to unauthorized data creation, deletion, modification, or complete access.
CVE-2026-46784
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Content: Imaging, allowing unauthenticated attackers with network access to compromise critical data. Successful exploitation could lead to unauthorized creation, deletion, or modification of data, or complete access to all accessible data within the system. This impa
CVE-2026-46783
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content: Imaging allows unauthenticated network attackers to achieve complete system takeover. This could impact the confidentiality, integrity, and availability of content. Organizations should confirm if this product is in use and assess its exposure.
CVE-2026-46782
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle WebCenter Enterprise Capture could allow a low-privileged attacker with network access to take over the system and potentially impact other products. The issue is with the Client Bundle component and is reachable via HTTP.
CVE-2026-46781
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An unauthenticated attacker with network access could compromise Oracle WebCenter Enterprise Capture, potentially leading to a complete takeover of the product and impacting other services. This vulnerability carries a critical severity rating due to its potential impact on confidentiality, integrity, and availability.
CVE-2026-46779
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle WebCenter Enterprise Capture allows a low-privileged attacker with network access to take control of the system, potentially impacting other products. This could lead to significant impacts on confidentiality, integrity, and availability.
CVE-2026-46778
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle WebCenter Enterprise Capture allows unauthenticated remote attackers to compromise the system. Successful exploitation could lead to a complete takeover of the product, potentially impacting other connected Oracle products. The vulnerability is reachable via network access using RMI,
CVE-2026-46777
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Oracle WebCenter Content allows unauthenticated network attackers to compromise the system, potentially leading to unauthorized modification, deletion, or access to critical data. This could impact the confidentiality and integrity of managed content.
CVE-2026-46774
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Oracle Unified Directory allows unauthenticated attackers with network access to take over the directory service. This could impact the confidentiality, integrity, and availability of directory data and operations. The reachability and relevance of this product within your environment should be confi
CVE-2026-46773
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle Unified Directory, allowing unauthenticated network attackers to potentially take over the directory service. This could impact confidentiality, integrity, and availability. The relevance and exposure of this product within our environment need to be confirmed.
CVE-2026-46767
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Portal's Composer component allows a low-privileged attacker with network access to potentially take over the portal. This could impact additional products and requires assessment to understand business risk.
CVE-2026-46766
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content could allow an unauthenticated attacker with network access to compromise the system, potentially leading to a complete takeover. This could impact the confidentiality, integrity, and availability of the content managed by the product.
CVE-2026-46765
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Portal allows a low-privileged attacker with network access to compromise the product. Successful exploitation can result in a complete takeover of the portal, potentially impacting other integrated products.
CVE-2026-35323
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Oracle WebCenter Content allows a low-privileged attacker with network access to compromise the system, potentially impacting additional products. Successful exploitation could lead to a full takeover of Oracle WebCenter Content.
CVE-2026-35321
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content allows a low-privileged attacker with network access to take over the system. This issue, affecting Oracle Fusion Middleware, could also impact other products. Readers should verify if their organization uses Oracle WebCenter Content and assess potential exposure.
CVE-2026-35320
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content allows an unauthenticated attacker with network access to take over the system, potentially impacting other Oracle Fusion Middleware products.
CVE-2026-35319
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Content, allowing unauthenticated network attackers to take over the system. This impacts confidentiality, integrity, and availability, necessitating a review of affected systems.
CVE-2026-35316
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Oracle WebCenter Content allows a low-privileged attacker with network access to compromise the system, potentially leading to a full takeover and impacting additional products. This issue is easily exploitable via HTTP and carries a critical severity rating due to its impacts on confidentiality, int
CVE-2026-35313
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability in Oracle Access Manager could allow a low-privileged attacker with network access to take over the system. This could impact other connected products because Oracle Access Manager manages access and authentication. Organizations should confirm if they use this technology and assess potential e
CVE-2026-35312
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Virtual Directory could allow unauthenticated attackers with network access via LDAP to take over the system. This impacts identity and data access management capabilities. Confirmation of product reachability and criticality is advised.
CVE-2026-35310
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Coherence allows unauthenticated network attackers to compromise the system, potentially leading to a complete takeover. This impacts confidentiality, integrity, and availability. The reader should care because this could affect Oracle Coherence services and managed data if reachable.
CVE-2026-35309
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Coherence allows unauthenticated attackers with network access to compromise the system via HTTP, potentially leading to a complete takeover. This impacts confidentiality, integrity, and availability.
CVE-2026-35308
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Coherence allows unauthenticated attackers with network access to potentially take over the system, impacting connected products. This issue is reachable via HTTP and could lead to complete system compromise.
CVE-2026-35307
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle Coherence, a component of Oracle Fusion Middleware, allowing unauthenticated attackers with network access via HTTP to potentially take over the system. Successful exploitation could significantly impact other connected products.
CVE-2026-35306
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Coherence allows unauthenticated attackers network access to compromise the product, potentially leading to unauthorized access, modification, or deletion of critical data.
CVE-2026-35305
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle Coherence, allowing unauthenticated attackers with network access to compromise the product and potentially impact other connected products. Successful exploitation could lead to unauthorized access to critical data or unauthorized modification of data.
CVE-2026-35304
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware, allows unauthenticated attackers with network access via HTTPS to take over the system. This presents significant risks to confidentiality, integrity, and availability. Confirmation of its presence and reachability within our environ
CVE-2026-35301
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in Oracle WebLogic Server's Console component that allows unauthenticated network attackers to compromise the server. This could lead to a complete takeover, impacting other connected products.
CVE-2026-35300
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability in Oracle WebLogic Server's Core component allows unauthenticated attackers with network access to completely compromise the server, impacting confidentiality, integrity, and availability. This issue is easily exploitable, and successful attacks can lead to a full takeover of the server. You sh
CVE-2026-35298
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebLogic Server allows a highly privileged attacker with network access to compromise the server, potentially impacting other products. The issue could lead to a complete takeover of the WebLogic Server.
CVE-2026-35296
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Sites, a web content management product, allows unauthenticated attackers with network access to achieve complete system takeover. This issue impacts confidentiality, integrity, and availability.
CVE-2026-35294
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Identity Manager Connector allows a low-privileged attacker with network access to potentially take over the connector. Successful exploitation could significantly impact connected products, leading to a complete compromise of the connector's confidentiality, integrity, and availabili
CVE-2026-35293
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Oracle WebCenter Sites, allowing unauthenticated attackers with network access to compromise the entire system. This could lead to a complete takeover, impacting confidentiality, integrity, and availability. Confirm if your Oracle WebCenter Sites deployment is affected and exposed.
CVE-2026-35292
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in Oracle WebLogic Server's Console, allowing unauthenticated network attackers to compromise the server and potentially impact other products. The issue enables attackers to achieve complete takeover of the WebLogic Server.
CVE-2026-35286
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content allows unauthenticated attackers with network access to take over the system. This could severely impact confidentiality, integrity, and availability. Technical readers should assess their exposure to Oracle WebCenter Content to understand the potential risk.
CVE-2026-35285
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle WebCenter Enterprise Capture allows a low-privileged attacker with network access to take over the system. This could lead to significant impacts on confidentiality, integrity, and availability, potentially affecting other connected products.
CVE-2026-35284
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle WebCenter Enterprise Capture, allowing a low-privileged attacker with network access to take over the system. Exploitation via T3 or IIOP protocols could impact related products. Confirmation of its presence in the environment is needed to assess relevance.
CVE-2026-35283
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle WebCenter Enterprise Capture allows a low-privileged attacker with network access to compromise the system and potentially impact other products. This could lead to a takeover of the affected Oracle WebCenter Enterprise Capture.
CVE-2026-35282
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle WebCenter Enterprise Capture allows a low-privileged attacker with network access to potentially compromise the system, leading to a full takeover. This could significantly impact additional products.
CVE-2026-35281
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle WebCenter Enterprise Capture allows a low-privileged attacker with network access to achieve full system takeover. This could impact additional products beyond the initially affected component. Technical and security leaders should consider the potential for a complete compromise of t
CVE-2026-35280
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle WebCenter Enterprise Capture allows a low-privileged attacker with network access to take over the system and potentially impact other products. This issue poses a significant risk to confidentiality, integrity, and availability.
CVE-2026-35278
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle PeopleSoft's Performance Monitor component allows unauthenticated attackers with network access to take over the affected system. This issue presents a significant risk to confidentiality, integrity, and availability.
CVE-2026-35270
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebCenter Content allows a high-privileged attacker with network access via HTTP to compromise the system, potentially leading to a complete takeover. While the vulnerability resides in WebCenter Content, successful exploitation could impact additional products. This issue is relevant
CVE-2026-35268
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Fusion Middleware Identity Manager allows a low-privileged attacker with network access to potentially take over the system, impacting connected products. The vulnerability, which affects core identity management functions, carries a high severity score, indicating severe impacts on c
CVE-2026-35263
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle WebLogic Server, accessible via HTTP, could allow a low-privileged attacker to gain complete control of the server and potentially impact other connected products. This issue requires attention from teams managing the application and its infrastructure to identify instances, assess ex