NVD disclosure day
CVE-2026-31928
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
DMP-5000 devices have a critical vulnerability where default administrative web accounts with weak authentication are not mandatory to change, potentially allowing unauthorized users to gain full system access. This issue is concerning because it enables complete control over affected systems if network-accessible defa
CVE-2026-28701
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Daktronics Controller Firmware has a directory traversal vulnerability that allows remote users to enumerate arbitrary file system paths. This could lead to information disclosure and further compromise if the firmware is reachable and relevant to your operational technology systems. Confirming its use and exposure is
CVE-2026-53576
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Kestra's REST API authentication filter improperly handles requests ending in `/configs`, allowing unauthenticated access to sensitive endpoints. This vulnerability could enable an unauthenticated attacker to create and execute code as root within the Kestra container, potentially leading to host system compromise if t
CVE-2026-49869
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Kestra OSS allows unauthenticated attackers to bypass authentication and execute arbitrary workflows, potentially leading to remote code execution as root. This occurs because a flawed path check in the AuthenticationFilter permits access to sensitive endpoints. If reachable, this could allow an atta
CVE-2026-54352
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Budibase, an open-source low-code platform, has a vulnerability allowing authenticated users to read any file accessible by the server. This occurs when processing uploaded zip files containing symbolic links, which are not properly handled during extraction and streaming. If reachable, this could lead to unauthorized
CVE-2026-54350
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated visitor to a published Budibase application can read and modify all data in connected collections due to improper input sanitization in query execution. This bypasses intended access controls, potentially leading to unauthorized data exposure and alteration.
CVE-2026-53309
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's OCFS2 distributed lock manager could allow an attacker to read beyond intended data boundaries, potentially impacting data integrity and confidentiality. The issue stems from an off-by-one error in region comparison logic within the kernel. The exact impact depends on reachability
CVE-2026-52785
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in OpenProject's timestamps functionality, potentially allowing authenticated users to access or modify project data. This issue is relevant if your organization uses OpenProject and it is exposed externally.
CVE-2026-52782
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in OpenProject, a web-based project management application, allows a project administrator to access another project's cloud storage. This IDOR (Insecure Direct Object Reference) can lead to unauthorized access and modification of project data by overwriting access controls on shared cloud storage folde
CVE-2026-46386
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in OpenProject's default Docker image configuration, allowing logged-in users to access sensitive system information due to a predictable secret key. This issue presents a significant risk as it can lead to unauthorized access and potential system compromise, making it crucial to identif
CVE-2026-33646
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the mise developer tool allows arbitrary command execution if a malicious `.tool-versions` file is processed. This can occur when a user navigates into a directory containing such a file, as the tool's template engine can be exploited without a trust prompt. This could potentially lead to unauthorize
CVE-2026-54636
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Dokku's cron plugin allows an authenticated user to execute commands on the host system by using special shell characters in app.json cron commands, escaping the Docker container. This could lead to unauthorized host command execution.
CVE-2026-45408
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Dokku allows authenticated users to execute arbitrary commands by pushing code with a crafted application name, which is then interpreted as commands by the server's bash script. This could lead to unauthorized command execution on the server.
CVE-2026-45405
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Dokku, a Docker-powered platform-as-a-service, has a vulnerability in archive extraction commands where user-supplied archives are not properly sanitized, potentially allowing an attacker to write arbitrary files. This could enable overwriting sensitive files, like SSH keys, to gain unrestricted shell access to the ser
CVE-2026-12411
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A broken access control vulnerability in Canonical LXD allows an untrusted guest to mount, read, and overwrite other guests' storage volumes if a specific setting is enabled. This could lead to unauthorized data access and modification.
CVE-2026-0685
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical server-side template injection vulnerability exists in the Genshi Template Engine's expression evaluation component, potentially allowing remote code execution. This could impact systems if affected applications process crafted template expressions without proper sanitization, leading to unauthorized code ex
CVE-2025-11919
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the default JVM's handling of temporary files, allowing an attacker with access to a shared temporary directory to inject malicious code during JVM startup. By preemptively placing a malicious library in the classpath, an attacker could cause the JVM to execute arbitrary code. This vulnerabili
CVE-2026-57658
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in TemplateSpare allows administrators to upload arbitrary files, potentially leading to system compromise. This issue impacts the integrity and confidentiality of the application if reachable.
CVE-2026-56070
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the Advance Product Search tool, potentially allowing attackers to access or modify sensitive database information. This issue is relevant if the Advance Product Search tool is deployed and reachable, as it could lead to unauthorized data disclosure or service di
CVE-2026-56068
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the JetEngine plugin, potentially allowing attackers to access or modify sensitive database information. Since JetEngine is a widely used WordPress plugin, this issue could be relevant to systems utilizing it, posing a risk to data integrity and confidentiality.
CVE-2026-56067
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the JetSmartFilters WordPress plugin, potentially allowing attackers to execute malicious SQL commands. This could lead to unauthorized access to sensitive data or disruption of services on affected websites. Confirming the use of this plugin within the environme
CVE-2026-56062
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the Quotes llama plugin. This flaw could enable attackers to access or alter database information without authentication, potentially impacting application data integrity and availability. Confirmation of the plugin's use is necessary to assess exposure and relev
CVE-2026-56059
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in a travel booking theme, allowing authenticated users to upload malicious files that could compromise system integrity and confidentiality. The vulnerability is reachable via the network and could impact public-facing web services.
CVE-2026-56058
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Quform, a web form plugin, allows unauthorized file uploads. If reachable, this could enable attackers to upload malicious files, potentially leading to arbitrary code execution and system compromise. Confirming the use of this plugin is crucial for assessing its relevance to your environmen
CVE-2026-56057
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A PHP object injection vulnerability exists in the Uncanny Automator Pro WordPress plugin. If reachable, an attacker could exploit this to execute arbitrary code, potentially compromising system confidentiality, integrity, and availability. This issue is relevant to organizations using the plugin, requiring verificatio
CVE-2026-56036
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in a WordPress payment plugin. This flaw could enable an attacker to access or modify sensitive data, particularly concerning payment transactions, if the plugin is in use and network-reachable.
CVE-2026-56034
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability in the Library Management System could allow attackers to access sensitive data over the network. This could lead to unauthorized data access and potential service disruption. It is uncertain if this technology is in use or exposed.
CVE-2026-56033
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated privilege escalation vulnerability exists in Dokan Pro, a WordPress plugin. This allows attackers to gain elevated permissions without authentication, potentially impacting website integrity and availability by granting administrative control. The issue is concerning for marketplace platforms and req
CVE-2026-56032
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A PHP object injection vulnerability in Buddyboss Platform allows unauthenticated attackers to execute arbitrary code via network requests, potentially leading to website compromise or data loss.
CVE-2026-56030
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated privilege escalation vulnerability exists in the Paytium technology. If reachable, this could allow attackers to gain unauthorized administrative access. Confirmation of its use and external exposure is needed to assess impact.
CVE-2026-56028
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the Easy Elements for Elementor plugin allows unauthenticated attackers to escalate privileges. This could enable unauthorized administrative control over websites using the plugin, potentially impacting content and configuration. The issue is reachable over the network.
CVE-2026-56027
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in the Booster for WooCommerce plugin. If reachable, an attacker with low-privileged access could upload arbitrary files, potentially leading to code execution and site compromise. This issue impacts e-commerce functionality and requires verification of relevance an
CVE-2026-54831
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in GeoDirectory, potentially allowing unauthorized access to data by injecting malicious SQL code. This affects systems utilizing versions prior to 2.8.162. The vulnerability's nature and the plugin's common use for public-facing directories make it a concern for da
CVE-2026-54827
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the Real Estate 7 theme, potentially allowing attackers to access or modify database information when the theme is part of a web application. This could impact the integrity and availability of stored data, and its relevance depends on whether the affected theme
CVE-2026-54825
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability in wpDataTables allows attackers to inject malicious SQL code. This could potentially lead to unauthorized access or modification of sensitive data if the vulnerable component is reachable. Organizations using this plugin should confirm its presence and assess any exposure
CVE-2026-54820
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in the JetBooking system, allowing attackers to execute malicious SQL code. This could potentially lead to unauthorized access to sensitive data or service disruption. Given the system's network-accessible nature, its relevance to our environment should be confirmed
CVE-2026-57926
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A prototype pollution vulnerability in JetBrains YouTrack's websandbox bridge allows unauthenticated network access, potentially leading to system compromise by affecting application behavior and data integrity. This threat is classified as external and critical, requiring assessment of deployed instances and their exp
CVE-2026-53914
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in JetBrains Kotlin's build cache metadata could enable code execution via unsafe deserialization. This poses a risk to development environments if the affected technology is reachable. Confirming usage of vulnerable Kotlin versions and their exposure is crucial for security-aware leaders and t
CVE-2025-64152
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A path traversal vulnerability in Apache IoTDB may allow unauthorized access and modification of data. This critical issue can be exploited over the network, potentially impacting sensitive files. Confirming the relevance and exposure of deployed IoTDB instances is essential.
CVE-2025-55017
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A path traversal vulnerability exists in Apache IoTDB, potentially allowing unauthorized access to restricted directories. If reachable, this could lead to unauthorized data access and modification. Readers should care because this impacts the confidentiality and integrity of data managed by Apache IoTDB.
CVE-2026-57881
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stack-based buffer overflow in GeoVision devices' remote login processing allows unauthenticated attackers to potentially execute arbitrary code or cause a denial of service by sending overly long login data.
CVE-2026-57880
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated stack-based buffer overflow in GeoVision surveillance systems may allow remote attackers to cause a denial of service or execute code by sending crafted RTSP requests exploiting insufficient bounds checking. This vulnerability could disrupt video monitoring services if the affected devices are expose
CVE-2026-57879
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stack-based buffer overflow vulnerability exists in GeoVision GV-LPC2011 and GV-LPC2211, allowing unauthenticated remote attackers to cause memory corruption or potentially execute arbitrary code via crafted RTSP requests, impacting network-connected devices.
CVE-2026-57878
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated stack-based buffer overflow exists in thttpd, potentially affecting GeoVision GV-LPC2011 and GV-LPC2211 devices. A remote attacker could exploit this by sending a crafted HTTP request to cause memory corruption, denial of service, or arbitrary code execution, impacting device availability and integri
CVE-2026-2053
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in WSO2 API Manager's message flow component allows unauthenticated attackers to manipulate WS-Addressing headers to redirect server-initiated requests to arbitrary destinations. This could lead to unauthorized access to internal network resources.
CVE-2026-48930
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A flaw in Node.js TLS hostname handling can allow embedded-nul hostnames to cause silent authority rebinding. This vulnerability affects all supported Node.js release lines and could enable attackers to trick Node.js applications into connecting to unintended servers.
CVE-2026-9222
Halo Surface Signal: 3 out of 5 — possibly public-facing.
The Setracker2 Android Companion App has a weakness where it only requires a password hash for backend authentication, potentially allowing an attacker with the hash to gain full access to backend services. This could impact systems relying on this app for authentication. Uncertainty remains regarding the specific back