NVD disclosure day

Published threat advisories for July 12, 2026

CVE-2026-10666

Zephyr RTOS Network Address Parsing Stack Buffer Overflow

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A vulnerability in the Zephyr RTOS network address parsing function could allow an attacker to corrupt memory and potentially control a device by sending a specially crafted network address. This flaw impacts applications that process network-influenced address strings through standard socket APIs or DNS. Confirming re

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2026-56271

Flowise Authentication Bypass via Weak Default JWT Secrets

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Flowise's authentication middleware is vulnerable due to weak, hardcoded default JWT secrets and values. If an application falls back to these defaults, an attacker could forge valid JWTs to impersonate any user, including administrators, leading to authentication bypass. This is a concern because it could allow unauth

NVD modified: NVD date unavailable