NVD disclosure day
CVE-2026-62674
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authenticated user with edit access to an Omnigent session can replace a shared agent, leading to the execution of attacker-controlled commands with the runner process's permissions, potentially exposing sensitive data and internal services. This vulnerability impacts AI agent orchestration and data security.
CVE-2026-39909
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A use-after-free vulnerability in llama.cpp's RPC server permits unauthenticated remote attackers to achieve arbitrary read and write access. This could lead to full remote code execution by triggering re-execution of stored graphs with dangling pointers. The primary concern is confirming if this technology is deployed
CVE-2026-75932
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Jet Admin allows an attacker to hijack custom domains, reroute traffic, and steal OAuth credentials by creating a malicious app. This impacts systems managing web applications and internal tools, making it crucial to confirm relevance and exposure within your environment.
CVE-2026-69502
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A server-side request forgery vulnerability in Azure SQL Database could allow an unauthorized attacker to elevate privileges over a network. This means an attacker might be able to access or modify sensitive data or perform actions with higher permissions than they should have. This is important for understanding cloud
CVE-2026-77087
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Paperclip's local mode has a vulnerability that allows arbitrary command execution via DNS rebinding when a developer visits a malicious webpage. This could enable an attacker to execute commands through the process adapter.
CVE-2026-63343
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An authenticated Incus user could exploit a vulnerability in the instance metadata API to read or overwrite any host file as root by using a malicious image containing a `metadata.yaml` symlink. This issue affects Incus, a system container and virtual machine manager. Version 7.3.0 addresses this vulnerability.
CVE-2026-63125
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An unprivileged user in Incus, a container and VM manager, can execute arbitrary code as root on the host by using a crafted image that includes a symbolic link. This link, followed during the backup process, could compromise host system integrity. Version 7.3.0 resolves this issue.
CVE-2026-62941
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Incus, a system container and virtual machine manager, has a vulnerability where copying an instance across projects can bypass project restrictions. Dangerous configuration keys from a source instance are merged after a check, potentially allowing unauthorized modifications to the target project's security. This could
CVE-2026-62940
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in Incus allows a restricted user to escalate privileges and escape to the host system when migrating instances between cluster members by bypassing project restrictions on configuration overrides. This could enable unauthorized access to instance data and the host system.
CVE-2026-62867
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in a system container and virtual machine manager that allows a project-scoped user to inject arbitrary arguments into a filesystem creation command executed as root. This could lead to unauthorized actions on the system. It is important to confirm if this software is in use and assess potential
CVE-2026-48769
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in the Incus client, used for managing system containers and virtual machines, could allow an attacker to execute arbitrary commands as root. This occurs when the client interacts with a malicious image server that sends a crafted header, potentially impacting server integrity and data. The vul
CVE-2026-48755
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An issue exists in Incus, a container and virtual machine manager, where improper validation of backup compression algorithms can lead to argument injection. This vulnerability may permit an attacker with low privileges to write arbitrary files to the host system, potentially resulting in arbitrary command execution. V
CVE-2026-48753
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A path traversal vulnerability in Incus's S3 upload endpoint could allow an authenticated attacker to create arbitrary files on the host system, potentially leading to command execution. This issue affects versions prior to 7.1.0.
CVE-2026-48752
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in Incus, a system container and virtual machine manager, allowing a specially crafted image or backup to read or write arbitrary host files, potentially leading to command execution. This could impact infrastructure integrity. Version 7.2.0 mitigates this issue.
CVE-2026-48751
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Incus, a container and virtual machine manager, allows for arbitrary command execution on the server by bypassing a security setting through snapshot features. This could impact the integrity and availability of the Incus server and managed instances if reachable. The issue is fixed in version 7.2.0.
CVE-2026-48750
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Incus, a system for managing containers and virtual machines, has a vulnerability in its command execution functionality. If the `exec-output` directory is a symlink, it could allow arbitrary file writes and potentially command execution. This issue requires confirmation of its reachability and relevance within your en
CVE-2026-48749
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Incus, a container and virtual machine manager, could allow a specially crafted image to read or write arbitrary files on the host system, potentially leading to command execution. This issue impacts the integrity of host systems and is relevant even in typically internal environments.
CVE-2026-77806
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
SPIP systems are vulnerable to unauthenticated remote code execution due to mishandled HTTP request headers. This flaw allows attackers to inject and run arbitrary code, potentially compromising the entire system. The vulnerability is actively exploited, making it crucial to assess relevance and exposure in your enviro
CVE-2026-76613
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in a Joomla extension, allowing contributor-level users to inject content into SQL queries, potentially leading to unauthorized data modification or theft. This issue impacts the integrity of website data and requires confirmation of relevance and assessment of exposure.
CVE-2026-77776
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in an LLM proxy allows attackers to impersonate users by spoofing a request header, potentially leading to unauthorized access and modification of stored language model memory. The risk is heightened in default deployments that expose the service to the network without authentication. Determining if thi
CVE-2026-77086
Halo Surface Signal: 3 out of 5 — possibly public-facing.
SiYuan's Bazaar functions contain a path traversal vulnerability that allows authenticated administrators to write arbitrary files or delete directories by manipulating the `packageName` parameter. This could impact application integrity and data availability if the administrative functions are exposed or used in a way
CVE-2026-77264
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A WordPress plugin for WooCommerce authentication is vulnerable to an authentication bypass. Attackers who know a user's email address can exploit this by tricking the plugin into revealing a secret login token, allowing them to log in as any user, including administrators. This impacts the confidentiality and integrit
CVE-2026-76158
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An external attacker can write files to arbitrary locations on Datiphy Data Management Center servers via its upload API by exploiting a path traversal vulnerability. This could impact system integrity and data confidentiality. The reader should care if this system is in use and exposed.
CVE-2026-76156
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An authenticated administrator of the Datiphy Data Management Center can execute arbitrary operating system commands as root by reaching an API endpoint, potentially leading to unauthorized system control. While administrative APIs are typically internal, they could be exposed, making this a plausible, though not inher
CVE-2026-76155
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Datiphy Data Management Center software is affected by a vulnerability where default credentials allow remote attackers to gain administrative access to the management platform, potentially leading to unauthorized control and access to data management functions.
CVE-2026-77651
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in the `arrayref` Rust crate allows malicious code execution during project compilation due to a rogue dependency. This could lead to arbitrary code execution in development or CI/CD environments. The issue impacts the software development lifecycle, not deployed applications, but warrants atte
CVE-2026-77650
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the `append-only-vec` Rust crate allows malicious code execution during project compilation through a rogue dependency that registers with a command-and-control server. This could lead to arbitrary code execution in the build environment, impacting the software supply chain. Its relevance depends on
CVE-2026-77649
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in a Rust development crate that allows malicious code execution during project compilation by registering with a command-and-control server. This supply chain issue impacts the integrity of the development environment and the software being built. The primary concern is to determine if this crat