NVD disclosure day
CVE-2026-49849
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unrestricted file upload vulnerability in xShop allows authenticated administrators to upload executable files. This could lead to remote code execution on the server, potentially resulting in a full system compromise. The issue is addressed in a later version.
CVE-2026-77415
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in the JSONata data processing language where crafted expressions can chain object-integrity weaknesses to execute arbitrary code. This allows attackers to overwrite internal states and access system modules, potentially executing code with the host process's privileges. The reachability
CVE-2026-77413
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the JSONata library, a JSON query and transformation tool, allows crafted expressions to execute arbitrary code if an attacker can supply them. This could impact systems processing JSON data, potentially affecting confidentiality, integrity, and availability. It's important to determine if this techn
CVE-2026-76904
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An SQL Injection vulnerability exists in the GeoTools Java library when using the PostGIS DataStore and its `jsonArrayContains` function with PostGIS 12 or greater. This could allow attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. This is relevant if your app
CVE-2026-62283
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An issue in Nezha Monitoring allows an authenticated user to access another user's session, read and write server files, and execute commands. This vulnerability stems from stream identifiers not being bound to their creating user, enabling session hijacking if a stream ID is obtained. Confirmation of relevance and exp
CVE-2026-61539
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Xinference, an API for running AI models, has a critical vulnerability where unauthenticated remote attackers can execute commands on the server by sending crafted prompts. This flaw exists because attacker-influenced output is passed to an `eval()` function within the tool-parsing logic. This could lead to server comp
CVE-2026-59989
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Phalcon PHP framework allows an attacker to inject and execute arbitrary PHP code by influencing Volt template source. This could lead to the compromise of application integrity and backend processes if the affected component is reachable and the template source can be manipulated. The core issue
CVE-2026-77810
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Neptune connector for Athena Federated Query allows authenticated users to access properties within the connector's Lambda function. This could potentially expose sensitive information. The issue requires an upgrade to aws-athena-query-federation v2026.30.1 or later.
CVE-2026-62674
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authenticated user with edit access to an Omnigent session can replace a shared agent, leading to the execution of attacker-controlled commands with the runner process's permissions, potentially exposing sensitive data and internal services. This vulnerability impacts AI agent orchestration and data security.
CVE-2026-74581
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's IPv6 network routing can cause stale route data to be reused, potentially leading to unexpected network behavior. This low-level issue requires carefully crafted network traffic to exploit and is not directly exposed.
CVE-2026-39909
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A use-after-free vulnerability in llama.cpp's RPC server permits unauthenticated remote attackers to achieve arbitrary read and write access. This could lead to full remote code execution by triggering re-execution of stored graphs with dangling pointers. The primary concern is confirming if this technology is deployed
CVE-2026-75932
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Jet Admin allows an attacker to hijack custom domains, reroute traffic, and steal OAuth credentials by creating a malicious app. This impacts systems managing web applications and internal tools, making it crucial to confirm relevance and exposure within your environment.
CVE-2026-69502
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A server-side request forgery vulnerability in Azure SQL Database could allow an unauthorized attacker to elevate privileges over a network. This means an attacker might be able to access or modify sensitive data or perform actions with higher permissions than they should have. This is important for understanding cloud
CVE-2026-77087
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Paperclip's local mode has a vulnerability that allows arbitrary command execution via DNS rebinding when a developer visits a malicious webpage. This could enable an attacker to execute commands through the process adapter.
CVE-2026-63343
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An authenticated Incus user could exploit a vulnerability in the instance metadata API to read or overwrite any host file as root by using a malicious image containing a `metadata.yaml` symlink. This issue affects Incus, a system container and virtual machine manager. Version 7.3.0 addresses this vulnerability.
CVE-2026-63125
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An unprivileged user in Incus, a container and VM manager, can execute arbitrary code as root on the host by using a crafted image that includes a symbolic link. This link, followed during the backup process, could compromise host system integrity. Version 7.3.0 resolves this issue.
CVE-2026-62941
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Incus, a system container and virtual machine manager, has a vulnerability where copying an instance across projects can bypass project restrictions. Dangerous configuration keys from a source instance are merged after a check, potentially allowing unauthorized modifications to the target project's security. This could
CVE-2026-62940
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in Incus allows a restricted user to escalate privileges and escape to the host system when migrating instances between cluster members by bypassing project restrictions on configuration overrides. This could enable unauthorized access to instance data and the host system.
CVE-2026-62867
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in a system container and virtual machine manager that allows a project-scoped user to inject arbitrary arguments into a filesystem creation command executed as root. This could lead to unauthorized actions on the system. It is important to confirm if this software is in use and assess potential
CVE-2026-48769
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in the Incus client, used for managing system containers and virtual machines, could allow an attacker to execute arbitrary commands as root. This occurs when the client interacts with a malicious image server that sends a crafted header, potentially impacting server integrity and data. The vul
CVE-2026-48755
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An issue exists in Incus, a container and virtual machine manager, where improper validation of backup compression algorithms can lead to argument injection. This vulnerability may permit an attacker with low privileges to write arbitrary files to the host system, potentially resulting in arbitrary command execution. V
CVE-2026-48753
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A path traversal vulnerability in Incus's S3 upload endpoint could allow an authenticated attacker to create arbitrary files on the host system, potentially leading to command execution. This issue affects versions prior to 7.1.0.
CVE-2026-48752
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in Incus, a system container and virtual machine manager, allowing a specially crafted image or backup to read or write arbitrary host files, potentially leading to command execution. This could impact infrastructure integrity. Version 7.2.0 mitigates this issue.
CVE-2026-48751
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Incus, a container and virtual machine manager, allows for arbitrary command execution on the server by bypassing a security setting through snapshot features. This could impact the integrity and availability of the Incus server and managed instances if reachable. The issue is fixed in version 7.2.0.
CVE-2026-48750
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Incus, a system for managing containers and virtual machines, has a vulnerability in its command execution functionality. If the `exec-output` directory is a symlink, it could allow arbitrary file writes and potentially command execution. This issue requires confirmation of its reachability and relevance within your en
CVE-2026-48749
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Incus, a container and virtual machine manager, could allow a specially crafted image to read or write arbitrary files on the host system, potentially leading to command execution. This issue impacts the integrity of host systems and is relevant even in typically internal environments.
CVE-2026-77806
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
SPIP systems are vulnerable to unauthenticated remote code execution due to mishandled HTTP request headers. This flaw allows attackers to inject and run arbitrary code, potentially compromising the entire system. The vulnerability is actively exploited, making it crucial to assess relevance and exposure in your enviro
CVE-2026-76613
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in a Joomla extension, allowing contributor-level users to inject content into SQL queries, potentially leading to unauthorized data modification or theft. This issue impacts the integrity of website data and requires confirmation of relevance and assessment of exposure.
CVE-2026-77776
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in an LLM proxy allows attackers to impersonate users by spoofing a request header, potentially leading to unauthorized access and modification of stored language model memory. The risk is heightened in default deployments that expose the service to the network without authentication. Determining if thi
CVE-2026-59318
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Spring AI's tool calling support allows an unauthenticated attacker to invoke tools not intended for a request, potentially leading to privilege escalation. This occurs because the per-request tool list is not fully enforced. Organizations should care to prevent unauthorized actions in AI application
CVE-2026-77086
Halo Surface Signal: 3 out of 5 — possibly public-facing.
SiYuan's Bazaar functions contain a path traversal vulnerability that allows authenticated administrators to write arbitrary files or delete directories by manipulating the `packageName` parameter. This could impact application integrity and data availability if the administrative functions are exposed or used in a way
CVE-2026-62440
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service plugin allows unauthorized cross-tenant manipulation of Kubernetes clusters, including node management, potentially affecting resources across tenants.
CVE-2026-61398
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical improper encoding vulnerability exists in Apache CloudStack's user interface during password resets, potentially allowing unauthorized data access and modification. This affects systems using specific versions of Apache CloudStack, and readers should verify their exposure and relevance.
CVE-2026-59085
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical Server-Side Request Forgery vulnerability in Apache CloudStack's webhook module may allow an attacker to make the server send requests to internal or external resources. This could potentially lead to unauthorized access to sensitive information or internal systems. Confirm if your environment uses this spec
CVE-2026-77264
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A WordPress plugin for WooCommerce authentication is vulnerable to an authentication bypass. Attackers who know a user's email address can exploit this by tricking the plugin into revealing a secret login token, allowing them to log in as any user, including administrators. This impacts the confidentiality and integrit
CVE-2026-76158
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An external attacker can write files to arbitrary locations on Datiphy Data Management Center servers via its upload API by exploiting a path traversal vulnerability. This could impact system integrity and data confidentiality. The reader should care if this system is in use and exposed.
CVE-2026-76156
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An authenticated administrator of the Datiphy Data Management Center can execute arbitrary operating system commands as root by reaching an API endpoint, potentially leading to unauthorized system control. While administrative APIs are typically internal, they could be exposed, making this a plausible, though not inher
CVE-2026-76155
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Datiphy Data Management Center software is affected by a vulnerability where default credentials allow remote attackers to gain administrative access to the management platform, potentially leading to unauthorized control and access to data management functions.
CVE-2026-77651
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in the `arrayref` Rust crate allows malicious code execution during project compilation due to a rogue dependency. This could lead to arbitrary code execution in development or CI/CD environments. The issue impacts the software development lifecycle, not deployed applications, but warrants atte
CVE-2026-77650
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the `append-only-vec` Rust crate allows malicious code execution during project compilation through a rogue dependency that registers with a command-and-control server. This could lead to arbitrary code execution in the build environment, impacting the software supply chain. Its relevance depends on
CVE-2026-77649
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in a Rust development crate that allows malicious code execution during project compilation by registering with a command-and-control server. This supply chain issue impacts the integrity of the development environment and the software being built. The primary concern is to determine if this crat