NVD disclosure day
CVE-2026-39955
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Cacti, an open-source performance and fault management framework, contains a critical pre-authentication SQL injection vulnerability in its graph viewing component that could allow unauthenticated attackers to access or modify sensitive data. This issue is relevant if your organization uses Cacti, as it could impact sy
CVE-2026-39948
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in Cacti, an open-source performance monitoring framework, allowing unauthenticated attackers to compromise database confidentiality and integrity. The flaw is reachable pre-authentication on installations with guest graph viewing enabled. Confirm relevance and exposure of
CVE-2026-39938
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated Local File Inclusion vulnerability in Cacti allows attackers to read sensitive files or execute commands, potentially compromising system integrity.
CVE-2026-55666
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Rocket.Chat's Apple OAuth login handler allows attackers to take over user accounts by forging authentication tokens. If an email is missing from an Apple-issued token, the platform may accept an arbitrary email from the request, enabling account takeover. This impacts organizations using Rocket.Chat
CVE-2026-55570
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
SiYuan, a knowledge management system, has a vulnerability where untrusted marketplace package fields can lead to HTML injection. In the desktop client, this can escalate to arbitrary operating system command execution, potentially compromising system and user data. The issue is fixed in version 3.7.0.
CVE-2026-55454
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Appsmith's bundled Caddy reverse-proxy has a vulnerability where an authenticated, low-privileged user can take over the proxy's configuration. This is possible by exploiting an SSRF vulnerability to access the unauthenticated admin API internally, potentially impacting the platform's integrity and availability.
CVE-2026-54158
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
SiYuan, a knowledge management system, has a vulnerability where interpolated cell content can execute arbitrary JavaScript when specific panels are opened. This could lead to remote code execution on desktop versions if an attacker can modify a synced workspace, affecting all devices that open the compromised data. Th
CVE-2026-54069
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in SiYuan Note's kernel allows any installed browser extension to gain administrator access, potentially enabling data exfiltration and configuration tampering. This issue arises from the kernel's unconditional trust of `chrome-extension://` origins. The primary concern is whether this personal
CVE-2026-54067
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in SiYuan, a personal knowledge management system, allows for arbitrary JavaScript execution through specially crafted CSS snippets embedded in shared workspaces. This could lead to remote code execution on user devices, even if JavaScript is disabled, by chaining through the system's rendering process.
CVE-2026-50551
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
SiYuan, an open-source knowledge management system, has a stored cross-site scripting vulnerability that can escalate to remote code execution in its desktop client. This flaw allows an authenticated attacker to potentially run malicious code on a user's system. The relevance and exposure of this technology within the
CVE-2026-39893
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Cacti, an open-source performance monitoring tool, has a vulnerability allowing unauthenticated SQL injection through a request variable. This could lead to unauthorized data access or manipulation if guest viewing is enabled and the endpoint is reachable.
CVE-2026-52813
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Gogs, a self-hosted Git service, allows specially crafted organization names to enable path traversal, leading to remote code execution. This could allow an attacker to store or retrieve repository data in arbitrary filesystem locations, potentially overwriting configurations and compromising the sys
CVE-2026-52811
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Gogs allows authenticated users with write access to redirect file writes through a directory symlink, potentially enabling arbitrary file writes to locations such as SSH authorized keys or repository hooks, leading to system compromise.
CVE-2026-52806
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authenticated user can execute arbitrary code on a Gogs server by creating a pull request with a specially crafted branch name during a rebase operation. This vulnerability, affecting the self-hosted Git service, could allow an attacker to gain unauthorized control over the affected systems.
CVE-2026-46423
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Rocket.Chat's SAML authentication implementation allows for authentication bypass if SAML is enabled without an Identity Provider certificate, potentially enabling unauthorized access to user accounts and communications.
CVE-2026-45689
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Rocket.Chat's OAuth server is vulnerable to an unauthenticated token forgery, allowing attackers to obtain valid access tokens for any user, including administrators, by sending a crafted POST request. This could grant unauthorized access to sensitive data and administrative functions, potentially leading to server-sid
CVE-2026-45688
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated attacker can exploit a vulnerability in Rocket.Chat's CAS login handler to bypass authentication by injecting NoSQL operators. This could allow them to impersonate users, including administrators, and gain full access to the platform's functionalities.
CVE-2026-33543
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in FOSSBilling, an open-source billing system, allowing an unauthenticated attacker to create a new administrator account via a guest API endpoint. This bypasses existing security checks and grants the attacker full administrative privileges and control over the system. This issue is relevant for
CVE-2026-53943
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in Ghost CMS versions prior to 6.37.0 where an unauthenticated user can poison shared caches with altered content via a crafted header. This may allow for the takeover of staff accounts if the frontend and admin panel share a domain, impacting user data and access.
CVE-2026-49980
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Rclone's remote control service is vulnerable to unauthenticated command execution, allowing an attacker to run arbitrary commands as the Rclone process user via specially crafted network requests.
CVE-2026-13032
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability in Google Chrome's WebGL component on Android could allow a remote attacker to escape the browser's security sandbox by luring a user to a malicious HTML page. This could potentially impact user data and system integrity.
CVE-2026-13028
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A use-after-free vulnerability in Google Chrome's WebGL component on Android could allow a remote attacker to escape the browser's security sandbox via a crafted HTML page. This could lead to significant compromise of the device if a user visits a malicious webpage.
CVE-2026-53088
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's network driver impacts data handling for transmitted packets. If reachable, this could allow for unauthorized access, data compromise, or service disruption. Its critical severity warrants awareness for potential system stability and integrity risks.
CVE-2026-53086
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's network driver could cause race conditions when handling queue timeouts, potentially impacting system stability and availability. The driver incorrectly attempts to stop all transmission queues when only one times out, which may lead to unintended restarts and disrupt network commu
CVE-2026-53055
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability in the Linux kernel's cryptographic driver may allow attackers to cause system instability or potentially execute arbitrary code by exploiting a race condition during packet transmission under heavy load. This issue affects hardware-accelerated packet processing.
CVE-2026-53049
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the GFS2 file system's logging mechanism has been resolved. The issue involved missing log locking during concurrent transactions, potentially allowing unauthorized data access or modification. Confirmation of relevance is recommended due to the file system's impact.
CVE-2026-53046
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's ksmbd component related to asynchronous crypto operations. This flaw could allow a reachable attacker to trigger a system crash due to premature memory freeing while hardware operations are ongoing. This impacts system stability and availability.
CVE-2026-53045
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Linux kernel's memory controller could allow an attacker to affect system confidentiality, integrity, and availability by triggering an incorrect memory timing check. This vulnerability has been resolved.
CVE-2026-53043
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A Linux kernel vulnerability allows out-of-bounds reads in the OCFS2 Distributed Lock Manager due to insufficient validation of network message data. This could potentially expose sensitive information or cause service disruptions if reachable. It is important to determine if your environment uses this component and is
CVE-2026-53010
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical use-after-free vulnerability exists in the Linux kernel's SMB server (ksmbd) during durable reconnects. This flaw could allow an attacker to corrupt kernel memory and potentially impact system confidentiality, integrity, and availability by exploiting a file descriptor that is accessed after it has been free
CVE-2026-53006
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A use-after-free vulnerability exists in the Linux kernel's IPv6 network processing that could impact system stability and data integrity. This issue arises from how ICMPv6 packets are handled, and if reachable, could allow for potential compromise.
CVE-2026-53002
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in the Linux kernel's netfilter conntrack component, allowing for potential stack-based buffer overflows when processing malformed SIP messages. This could lead to system instability or unauthorized code execution. The netfilter component's role in handling public-facing network traffic
CVE-2026-52999
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's netfilter component could lead to an out-of-bounds read during TCP option parsing, causing incorrect or failed network data logging. This affects systems configured for passive OS fingerprinting, potentially impacting network visibility and analysis. Uncertainty remains regarding s
CVE-2026-52993
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's TIPC module allows for a double-free condition during message validation, which could lead to system compromise. While the protocol's typical network isolation makes exploitation unlikely, its critical severity requires confirmation of relevance for systems using TIPC. The vulnerab
CVE-2026-52989
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A Linux kernel vulnerability exists in the nvmet-tcp component that could allow attackers to corrupt data or gain unauthorized access by sending crafted network data. This occurs when error handling fails to properly initialize memory structures, potentially leading to system instability. Identifying systems that use n
CVE-2026-52986
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Linux kernel's Netfilter component could allow an attacker to trigger issues by sending malformed SIP network packets, potentially impacting system data and service behavior. The vulnerability arises from unsafe port parsing that could lead to incorrect message handling. This is relevant due to t
CVE-2026-52982
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability in the Linux kernel's rtl8150 USB network driver could lead to data corruption or system instability if triggered locally. Uncertainty remains regarding specific product versions and exploitability within our environment.
CVE-2026-52958
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's libceph component may allow an out-of-bounds memory access if a malformed network message is processed. This could potentially lead to system instability or crashes. The impact is dependent on the specific use and reachability of this kernel component.
CVE-2026-52955
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's Ceph component may allow an out-of-bounds memory access due to discrepancies in crush map processing. This could lead to system instability, although direct external exploitation is considered unlikely.
CVE-2026-56121
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Feast contains a critical deserialization vulnerability allowing unauthenticated attackers to execute OS commands on the registry server via a crafted gRPC request. This could lead to system compromise by enabling arbitrary code execution as the service account.
CVE-2026-12537
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in a container launcher used by Google Gemini CLI and a GitHub Action. If reachable on headless CI platforms, an unprivileged attacker could execute code on the host system using a crafted configuration file. This matters if these specific tools are used in automated build environments.
CVE-2026-56237
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A broken authentication vulnerability exists in Capgo's API key generation mechanism, allowing attackers to create unauthorized API keys by manipulating requests. This could lead to unauthorized access to protected endpoints. The issue is reachable over a network and impacts access controls.
CVE-2026-56223
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in Capgo's cross-domain SSO, allowing administrators with a malicious identity provider to merge victim accounts by forging SAML assertions. This could lead to unauthorized access to accounts and data. The affected technology handles single sign-on and user provisioning.
CVE-2026-52931
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's batman-adv module allows an attacker to trigger undefined behavior by sending a malicious ACK packet to a receiving node. This occurs when the node accesses uninitialized sender variables, potentially impacting mesh network stability.
CVE-2026-52924
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A use-after-free vulnerability in the Linux kernel's SCTP component can be triggered by specific network packet handling, potentially leading to system crashes. This issue affects the memory management during association setup rollback. The exact impact depends on whether SCTP is utilized and exposed within your enviro
CVE-2026-52914
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's batman-adv module can allow malformed network fragments to bypass validation, leading to inconsistent length states during reassembly and a local denial of service. The issue stems from incorrect fragment length accounting.
CVE-2026-12417
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A WordPress plugin for sign-up and sign-in has an authentication bypass vulnerability. Attackers can exploit this to take over user accounts, including administrator accounts, by manipulating the password reset process without needing to be logged in. This could lead to unauthorized control of the website. The relevanc
CVE-2026-12416
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The Invoice Generator plugin for WordPress has a critical vulnerability that allows unauthenticated attackers to take over any account, including administrators. This is due to a flaw in the password reset functionality that lacks proper security verification, enabling attackers to set new passwords for chosen accounts
CVE-2026-12851
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
GeoVision GV-I/O Box 4E devices contain OS command injection vulnerabilities within their network configuration library. A specially crafted network packet can allow an attacker to execute arbitrary commands, potentially impacting the device's functionality and connected systems.
CVE-2026-12850
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
OS command injection vulnerabilities exist in GeoVision GV-I/O Box 4E devices within the `libNetSetObj.so` library. These flaws allow a network-accessible attacker to execute arbitrary commands by sending a specially crafted network packet, potentially impacting device network configuration and operational integrity.
CVE-2026-12849
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The GeoVision GV-I/O Box 4E has OS command injection vulnerabilities in its network configuration library that allow an attacker to execute commands via crafted network packets. This could impact device operations and data integrity.
CVE-2026-12848
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical stack overflow vulnerability exists in the DVRSearch service of GeoVision's GV-I/O Box 4E. This flaw could allow any network-connected user to send malformed messages, potentially leading to device compromise or disruption of its input/output control functions. It is important to determine if these devices a
CVE-2026-12846
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A stack overflow vulnerability exists in the GV-I/O Box 4E's DVRSearch service, allowing unauthenticated network messages to potentially overwrite memory. This could lead to altered network settings or service disruption on the device.
CVE-2026-12486
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Multiple OS command injection vulnerabilities exist in the GeoVision GV-I/O Box 4E's network configuration library. A specially crafted network packet could allow an attacker to execute commands on the device, potentially affecting its operation and security.
CVE-2026-12485
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical stack overflow vulnerability exists in the DVRSearch service of the GV-I/O Box 4E, a smart embedded device. This flaw can be triggered by specially crafted UDP messages, potentially allowing an attacker to compromise the device's confidentiality, integrity, and availability. Organizations using this technolo