NVD disclosure day
CVE-2026-57572
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Crawl4AI's Docker API is vulnerable to unauthenticated command injection, allowing attackers to execute arbitrary commands as the container's runtime user by manipulating Chromium launch arguments. This critical issue, fixed in version 0.9.0, poses a significant risk if the unauthenticated API is reachable.
CVE-2026-57571
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Crawl4AI versions prior to 0.9.0 have a vulnerability where a manipulated filename can lead to arbitrary file writes. This could allow an attacker to overwrite files or potentially execute code on a system. The issue is fixed in version 0.9.0.
CVE-2026-42341
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated payment bypass vulnerability exists in FOSSBilling's IPN callback endpoint when the Custom payment adapter is enabled, allowing attackers to mark unpaid invoices as paid without actual payment. This could impact revenue by enabling unauthorized free services.
CVE-2026-34038
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authenticated remote command injection vulnerability in Coolify's application deployment handling allows users with write permissions to execute arbitrary code and exfiltrate sensitive environment variables. This affects systems managing servers, applications, and databases, posing a risk of unauthorized code execut
CVE-2026-9181
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
ArcGIS Server has a directory traversal vulnerability that an unauthenticated attacker can exploit with crafted requests to access sensitive system files, potentially leading to unauthorized information disclosure.
CVE-2026-48614
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An improper authorization flaw in the Plesk XML API allows an authenticated user to inject directives, potentially writing arbitrary files as root and escalating privileges. This could grant an attacker full control over the affected server. The relevance depends on whether this specific API functionality is used and r
CVE-2026-48316
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An Improper Input Validation vulnerability in ColdFusion could allow remote attackers to execute arbitrary code in the context of the current user, potentially impacting system data and service behavior. The vulnerability is reachable via network access without user interaction or authentication.
CVE-2026-40139
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability in BeyondTrust Remote Support's authentication subsystem could allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, including privileged accounts, if a specific authentication configuration is enabled. This matters to organizations us
CVE-2026-40138
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A network attacker could bypass authentication controls in BeyondTrust Remote Support and Privileged Remote Access products to gain unauthorized appliance access, potentially including privileged accounts. This requires a specific, enabled authentication configuration.
CVE-2026-5268
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authentication bypass flaw exists in the default SFTP server component of Ciena products, allowing remote attackers to gain unauthorized filesystem access and potentially read or modify system files.
CVE-2025-53830
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A Server-Side Request Forgery vulnerability exists in the Anti-Virus application for ownCloud, potentially allowing authenticated attackers to force the server to make unintended requests. This could expose internal resources or sensitive information, impacting the confidentiality and integrity of your file storage and
CVE-2025-53827
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
ownCloud Core's Updater component has a vulnerability that could allow attackers with administrative privileges to execute arbitrary code. This poses a critical risk to system control and data integrity for organizations using affected versions of the file storage and sharing application.
CVE-2026-6900
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A certificate validation flaw exists in B&R Industrial Automation GmbH APROL systems. If reachable, this vulnerability could enable attackers to perform unauthorized actions and potentially expose sensitive data. Organizations should confirm APROL usage and its network exposure.
CVE-2026-12686
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authenticated user can bypass authorization checks by manipulating a company ID in a POST request, leading to unauthorized access to other companies' data hosted on the same subdomain. This could expose sensitive customer billing information and allow unauthorized modification of third-party data. The application fa
CVE-2026-56140
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Apache Camel's AWS SNS component has an improper input validation vulnerability. Because this component is producer-only and cannot receive inbound messages or process external data, there is no known exploitable path. This change is a defense-in-depth hardening measure for alignment.
CVE-2026-48205
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An improper input validation vulnerability in Apache Camel's DNS component allows attackers to craft requests to redirect DNS lookups to attacker-controlled servers. This could enable internal network reconnaissance by disclosing the existence of internal hostnames. Relevance depends on specific configurations bridging
CVE-2026-48204
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Apache Camel's MongoDB GridFS component allows improper input validation and access control. Attackers could exploit this by manipulating HTTP headers to override intended file operations, potentially leading to unauthorized file access, modification, or command injection through metadata. This is a
CVE-2026-48203
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Apache Camel's Solr component can allow for improper handling of HTTP headers, leading to injection of arbitrary Solr parameters or fields. This could result in server-side request forgery, enabling access to attacker-chosen URLs, or unauthorized data injection into Solr documents. The concern is rel
CVE-2026-46456
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Apache Camel's AWS2-SQS component allows an attacker to inject control headers into messages, potentially altering downstream processing. This occurs due to improper input validation, where sender-supplied headers are copied into the message exchange without sufficient filtering. The impact depends o
CVE-2026-46455
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An insufficient session expiration vulnerability in the Apache Camel Keycloak Component could allow attackers to use expired or not-yet-valid access tokens, potentially granting unauthorized access to routes that rely on this component for authentication. This issue affects how security tokens are validated, meaning th
CVE-2026-46454
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An Improper Input Validation vulnerability in the Apache Camel Cometd component allows unauthenticated attackers to inject malicious Camel control headers. This can influence downstream message processing, with potential impacts varying based on route configuration, due to a lack of default security policy.
CVE-2026-43867
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A deserialization vulnerability in Apache Camel's PQC component allows code execution if an attacker can write to the associated AWS Secrets Manager secret. This occurs during key metadata deserialization, potentially impacting applications managing cryptographic keys.
CVE-2026-40047
Halo Surface Signal: 3 out of 5 — possibly public-facing.
The Apache Camel Docling component improperly handles command arguments, potentially allowing unintended execution or directory traversal if external data influences specific headers. This vulnerability arises from insufficient validation of custom arguments passed to the external `docling` command-line tool. Organizat
CVE-2026-24014
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An unpatched vulnerability in Apache IoTDB's internal RPC interface allows for arbitrary file writes if the DataNode RPC port is exposed to untrusted networks, potentially impacting system integrity and data.
CVE-2026-24013
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Apache IoTDB suffers from an authentication bypass vulnerability where an attacker can spoof a session ID to access time-series data without proper authentication. This could allow unauthorized reading of sensitive data. Confirm if this technology is used and exposed in your environment.
CVE-2026-6382
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Authenticated users can inject OS commands into WordPress image operations if the server has ImageMagick's convert CLI and lacks specific PHP extensions. This vulnerability requires authenticated access and could impact the server's operating system and data.
CVE-2026-14808
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated remote attacker can view a specific page in the PROG MIS Management System to obtain database account and password credentials.
CVE-2026-14807
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in PROG MIS's ERP App, allowing unauthenticated remote attackers to log in, view application code, and obtain database credentials. This could lead to unauthorized access to sensitive system information. Uncertainty remains regarding the presence and network exposure of this specific ERP