NVD disclosure day
CVE-2026-48333
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An incorrect authorization vulnerability exists in Adobe Campaign Classic, potentially allowing an attacker to escalate privileges without user interaction. This could lead to unauthorized elevated access on the platform. Attackers can reach the affected technology via the network.
CVE-2026-48331
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Adobe Campaign Classic is affected by a critical Server-Side Request Forgery vulnerability that may lead to privilege escalation, potentially exposing system and user data. Exploitation requires no user interaction and can alter the scope of an attack.
CVE-2026-48330
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Adobe Campaign Classic has an SQL Injection vulnerability that may allow an unauthenticated attacker to execute arbitrary SQL commands, potentially leading to elevated access or control of the application without requiring user interaction. Confirming its use and external exposure is necessary for risk assessment.
CVE-2026-48326
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Adobe Campaign Classic is affected by SQL injection, enabling a low-privileged attacker to execute arbitrary code in the user's context. This vulnerability, which does not require user interaction, could lead to a compromise of system operations and data integrity if reachable. The scope of the vulnerability is changed
CVE-2026-48323
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Adobe Campaign Classic is vulnerable to arbitrary code execution due to improper handling of template engine elements. An unauthenticated attacker could exploit this by sending crafted data, leading to code execution within the user's context, impacting system confidentiality, integrity, and availability.
CVE-2026-48317
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An Improper Neutralization of Directives in Dynamically Evaluated Code vulnerability in Adobe Campaign Classic could allow a low-privileged attacker to execute arbitrary code remotely, impacting data confidentiality and integrity. This issue could be exploited without user interaction when reachable.
CVE-2026-18667
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in Tenable Sensor Proxy allows remote attackers to execute code with elevated privileges. This occurs if an operator connects the sensor to an attacker-controlled host. Confirming the presence and potential exposure of this technology in your environment is important.
CVE-2026-46713
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Misskey's JSON-LD signature validation allows spoofed activities to be accepted as valid, potentially undermining platform integrity. This issue affects the core functionality of the federated social media platform, raising concerns about the acceptance of unauthorized or falsified user actions.
CVE-2026-69240
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Sequelize, a Node.js ORM, has a SQL injection vulnerability when using the Oracle dialect and specific string inputs are processed. An attacker could inject arbitrary SQL expressions if an application value reaches a vulnerable escape path, potentially impacting database queries.
CVE-2026-48063
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Baileys API for WhatsApp Web allows for message spoofing and corruption of chat synchronization by sending a malicious payload. This could compromise the integrity of communication logs.
CVE-2026-67598
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Emlog Pro improperly validates TLS certificates for outbound requests to AI services, allowing network-adjacent attackers to intercept API keys and inject malicious AI responses. This could lead to unauthorized actions if the vulnerable communication channel is reachable.
CVE-2026-48031
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the go-base API template allows attackers to forge authentication tokens due to a hardcoded secret, enabling unauthorized access to protected endpoints and user data. This issue affects versions prior to May 18, 2026.
CVE-2026-38447
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
osTicket's API key generation uses predictable methods, allowing attackers to guess keys via brute-force attacks. This could lead to unauthorized access to the system.
CVE-2026-41452
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A missing authentication vulnerability in Krayin CRM's installer middleware allows unauthenticated remote attackers to gain full administrative access by overwriting the primary administrator account via a crafted HTTP POST request, potentially exposing all CRM data. The vulnerability is reachable over the network and
CVE-2026-39932
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
OpenEMR systems contain a vulnerability in the document category tree component that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database. This could lead to command execution as the web server user, potentially impacting various pages
CVE-2026-18248
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The @fastify/aws-lambda package, in version 6.4.0, allows unauthenticated attackers to bypass authentication and authorization by sending a crafted HTTP header to forge Lambda proxy event data. This could grant unauthorized access to applications that use this package for security decisions. The vulnerability is fixed
CVE-2026-9487
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in XML::Sig allows signature wrapping through duplicate IDs, potentially enabling an attacker to manipulate SAML assertions by crafting XML documents that appear valid but contain attacker-controlled data. This could impact systems relying on XML signature verification for authentication and data integr
CVE-2026-9390
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in the XML::Sig Perl library, allowing XPath injection through manipulated URI values during XML document verification. This could enable attackers to alter which data is processed for signature validation, potentially impacting data integrity and authenticity. The direct impact depends
CVE-2026-69085
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
SiYuan's search API has a SQL injection vulnerability that allows attackers to read and modify data in cleartext notebooks. This is possible through the `/api/filetree/searchDocs` endpoint when publish mode is enabled or with a RoleReader token, as the keyword parameter is directly incorporated into SQL queries. The is
CVE-2026-69084
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in SiYuan software, allowing unauthenticated attackers to read and modify data in cleartext notebooks via a SQL injection flaw in an API endpoint. This issue arises because the endpoint passes client-supplied SQL commands directly to the database without adequate restrictions, potentiall
CVE-2026-69083
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in SiYuan's fullTextSearchAssetContent endpoint, allowing unauthenticated users to execute arbitrary SQL commands. This could lead to the unauthorized reading, modification, or deletion of cross-notebook data by attackers who can reach the vulnerable endpoint. Organizations using Si
CVE-2026-68587
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
SiYuan note-taking software contains an information disclosure vulnerability in its heading transaction endpoints that bypasses publish-access checks. Attackers can exploit this by supplying a heading block ID to read full rendered content of unpublished or restricted documents. This could expose sensitive information,
CVE-2026-68586
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
SiYuan versions before 3.7.3 improperly handle access controls for content retrieval endpoints, allowing unauthenticated users to access rendered content of publish-forbidden documents. This may expose sensitive information about document references, particularly in environments where publish-mode authentication is dis
CVE-2026-68584
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authentication bypass vulnerability in SiYuan's publish mode allows unauthenticated attackers to retrieve full content of password-protected documents by bypassing password checks. This could expose sensitive information that should otherwise be secured.
CVE-2026-64827
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical authentication bypass vulnerability exists in Telenia Software TVox within the set_env.php file. Attackers can exploit this by appending a specific string to a URL to bypass authentication and gain unauthenticated access to administrative PHP scripts, potentially leading to unauthorized access and control.
CVE-2026-18108
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability exists in Net::SAML2 for Perl that allows authentication bypass. If an affected service is configured to accept encrypted assertions, an unauthenticated party can craft a specially signed assertion, bypass verification checks, and impersonate any user. This impacts public-facing authentication services
CVE-2026-2346
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical authorization bypass vulnerability exists in the Menulux Software Inc. Mobile App, allowing software integrity attacks if reachable. This could lead to unauthorized access and manipulation of application functions. The potential business impact is uncertain, but this flaw warrants attention to understand its
CVE-2026-18574
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management Servers may allow an unauthenticated remote attacker to execute arbitrary commands, potentially leading to a full compromise of the security management system. This issue could be relevant if management servic
CVE-2026-33591
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in Wapt Server that permits remote, unauthenticated attackers to bypass security restrictions and obtain valid session tokens for targeted accounts. This could potentially allow unauthorized access to the server and its managed systems. The relevance of this issue depends on the network exposure
CVE-2026-18588
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stack-based buffer overflow vulnerability exists in the `nas.cgi` component of Wavlink networking devices. This flaw can be exploited remotely by manipulating the `CONTENT_LENGTH` argument, potentially allowing attackers to execute arbitrary code. The vendor has released a fixed version, emphasizing the need to asses
CVE-2026-16534
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A WordPress plugin that imports and exports users and customers has a vulnerability allowing users with minimal privileges to create administrator accounts or alter existing administrator credentials. This could enable unauthorized access to sensitive data and full control of a website.
CVE-2026-16532
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Link Library WordPress plugin could allow unauthenticated users to perform SQL injection attacks. This means attackers could potentially access or alter sensitive data within the plugin's database. It is important to determine if this plugin is in use to assess potential exposure.
CVE-2026-16300
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability in the ChamaWP WordPress plugin allows unauthenticated attackers to reset arbitrary user passwords, potentially leading to full website takeover. The flaw in the password reset process means that an attacker could gain administrative access if the plugin is in use and its reset functionality is
CVE-2026-16250
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in a WordPress plugin allows unauthenticated users to upload and execute arbitrary PHP files. This could lead to remote code execution on affected servers. The issue is externally reachable, posing a critical risk to public-facing WordPress sites.
CVE-2026-16060
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A WordPress plugin has a vulnerability allowing an Editor to upload server-executable files via bypassed archive checks, potentially leading to remote code execution if the server is configured to execute such files.
CVE-2026-15930
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in the Simple Membership WordPress plugin allows unauthenticated attackers to overwrite administrator account data and take over accounts. This occurs when user creation fails during registration, and the plugin incorrectly uses the returned value to update an account, enabling unauthorized control via
CVE-2026-14557
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the SoftMarket WordPress plugin allows unauthenticated attackers to hijack any verified user's session by providing just the user's ID. This could grant unauthorized access to user accounts.
CVE-2026-12965
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in the Super Store Finder WordPress plugin, allowing unauthenticated attackers to extract database data. This issue stems from a failure to sanitize a parameter within an AJAX action, making it possible to inject malicious SQL queries. Any public-facing website using this p
CVE-2026-12872
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability exists in the Webinfos WordPress plugin that allows unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory. This could enable remote code execution on affected servers if PHP files are executed from the uploads path, potentially compromising website integrity a
CVE-2026-58062
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in Bouncy Castle for Java where a Stapled OCSP response may be accepted without proper binding to the checked certificate. This could potentially allow for the bypassing of certificate validation.
CVE-2026-8763
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in the Bouncy Castle Java cryptographic library that allows for bypassing name constraints. This could enable attackers to present fraudulent digital certificates, potentially leading to security policy violations or impersonation attacks. Its relevance depends on whether your environment utilize
CVE-2026-59650
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in the Bouncy Castle Java cryptography library that could allow unvalidated peer values to be exponentiated during Diffie-Hellman key agreement. This may impact systems using the library for secure communications. Identifying its use and assessing potential risk is important.
CVE-2026-59638
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in Bouncy Castle for Java, a cryptographic library, where a default setting can bypass security checks for secure connections. This could potentially lead to a loss of data integrity or confidentiality. The reachability and relevance of this issue within your environment need to be confi