NVD disclosure day
CVE-2026-90456
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An inventory-management component is affected by a vulnerability where an example configuration file contains a fixed, publicly known administrative password. If this example file is copied into active configuration without regenerating credentials, the component's administrative interface may be exposed to unauthorize
CVE-2026-89713
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's NFS server could allow an attacker to bypass file truncation permission checks for append-only files. This race condition could potentially lead to unauthorized data modification.
CVE-2026-89712
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NFS server could allow an attacker to cause a use-after-free condition by exploiting a race condition during mount expiration. This could lead to system instability or memory corruption. Understanding the relevance and exposure of this issue to your environment is important.
CVE-2026-89708
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's NFS server, where session data can be freed while still in use during session teardown. This race condition may lead to system instability or information disclosure.
CVE-2026-89703
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A use-after-free vulnerability in the Linux kernel's NFS server may allow an attacker to corrupt client state, potentially leading to system instability or denial of service. This flaw arises from incorrect handling of revoked NFS delegations, where freed memory might be accessed again, impacting system integrity and a
CVE-2026-89697
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's NFS server can allow unauthorized modification of file attributes and potential denial of service when handling SETATTR requests. The issue, which has been resolved, could impact file integrity and system availability if exposed.
CVE-2026-89689
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's NFS server allows for memory corruption when managing session slots, potentially leading to data integrity and availability issues. If reachable, an attacker could exploit this by sending crafted requests to corrupt memory, causing unexpected behavior or crashes. This issue warrant
CVE-2026-89688
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NFS server could allow for system instability or denial of service if a specific replay operation fails, due to improper reference counting. This issue does not appear to directly risk sensitive data but could impact system availability.
CVE-2026-89686
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A race condition in the Linux kernel's NFS server can lead to a system crash if two clients concurrently access a file with a delegation. This vulnerability is triggered by specific sequences of delegation revocation and file access. The issue is resolved in the Linux kernel.
CVE-2026-89681
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A race condition in the Linux kernel's NFS server could allow an attacker to cause a double-reference to a worker, potentially leading to resource leaks and denial of service. This impacts the integrity and availability of NFS services.
CVE-2026-89676
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's NFS server may allow an attacker to dereference freed memory during asynchronous copy operations, potentially causing system instability or data corruption. The issue arises from stale state entries that can lead to invalid memory access when specific server-side copy functions are
CVE-2026-89674
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's NFS server can lead to out-of-bounds writes or uninitialized memory leaks due to errors in XDR buffer size calculations. This could expose sensitive kernel data or allow unauthorized modifications if the NFS service is reachable.
CVE-2026-89672
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's NFS service could allow unintended deletion or modification of file access control lists via specially crafted requests. This could impact the integrity of file system access controls. Uncertainty exists regarding the specific products, versions, or business impact. <hr> A vulnerab
CVE-2026-89671
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's NFSv3 server could allow an unauthenticated remote attacker to manipulate Access Control Lists (ACLs). This could lead to unintended removal or modification of existing ACLs, potentially impacting file access permissions and integrity. The concern is whether this NFSv3 functionalit
CVE-2026-89669
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's NFSd component could allow a network-accessible attacker to cause a use-after-free condition, potentially leading to unauthorized data access or system compromise.
CVE-2026-89662
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A use-after-free vulnerability in the Linux kernel's NFS server could lead to system instability or crashes if a specific client teardown scenario with particular lock owner states is reached. This could impact the integrity and availability of NFS services.
CVE-2026-89660
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in the Linux kernel's NFS server, allowing a remote attacker to trigger a use-after-free condition. This could lead to memory corruption, system instability, or denial-of-service if the NFS server is reachable.
CVE-2026-89659
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's NFS server could lead to system instability or crashes if a client's file access delegation is revoked under specific timing conditions. This use-after-free issue might be exploitable over the network, potentially impacting NFS service availability and integrity. Confirmation of af
CVE-2026-89658
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's NFS service could allow a use-after-free error during NFSv4.0 revoked-state cleanup, potentially leading to system instability or data corruption. While NFS is typically used in private networks, occasional external exposure means this could impact internet-facing systems.
CVE-2026-89656
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's Ceph client allows for memory corruption via a malformed CRUSH map, potentially leading to system instability or data modification.
CVE-2026-89655
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's Ceph client due to a race condition during capability flush handling. This could lead to system instability or data corruption if reachable. Infrastructure teams should identify affected systems and plan for kernel updates.
CVE-2026-89654
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's Ceph client affecting session management. This flaw arises from a race condition during internal kernel operations, potentially allowing access to freed memory and impacting system stability and data integrity.
CVE-2026-89653
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's Ceph component allows for out-of-bounds writes when decoding map data, potentially affecting metadata integrity and availability. An attacker could exploit this network-accessible issue by sending a crafted map, leading to data corruption or service disruption.
CVE-2026-89652
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's CephFS component can allow a malicious MDS to cause a buffer overflow when copying file names, potentially leading to system instability. This issue is reachable when a CephFS mount is re-exported over NFS.
CVE-2026-89650
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's Ceph client could allow a malicious monitor to cause an out-of-bounds read by sending a crafted MDS map. This may impact internal data structures within the CephFS client kernel.
CVE-2026-89649
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's Ceph filesystem allows a malicious metadata server to disclose adjacent kernel heap bytes to a local user via the getxattr system call. This occurs due to an unchecked value length for the final attribute in an extended attribute blob, leading to an out-of-bounds read. This matters
CVE-2026-89643
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's audit system could lead to instability or data corruption if specific fsnotify rule autoremoval scenarios occur. This issue stems from incorrect dereferencing of shared kernel data structures, potentially impacting system integrity. Confirming relevance and exposure within your env
CVE-2026-89637
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A use-after-free vulnerability in the Linux kernel's CIFS client can occur when processing malformed network traffic, potentially leading to memory corruption, system instability, or data integrity issues.
CVE-2026-89636
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's SMB client can lead to a use-after-free condition, potentially affecting system stability. This occurs due to improper handling of memory pointers after freeing certain target system information. Uncertainty exists regarding its reachability and potential business impact.
CVE-2026-89635
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's ksmbd file sharing component allows a reconnecting session to incorrectly adopt another session's file lock under specific conditions. This could lead to a use-after-free vulnerability, potentially causing system instability or crashes. This issue is relevant for organizations usin
CVE-2026-89634
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's SMB client could allow an attacker to cause an integer overflow during error handling, bypassing security checks. This may lead to an out-of-bounds read, potentially causing denial-of-service or other impacts. The issue has been resolved.
CVE-2026-89633
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's SMB client could allow an unvalidated server-supplied offset to cause out-of-bounds memory reads or writes. This could lead to memory corruption, potentially impacting system stability or data confidentiality. The relevance depends on whether the affected SMB client functionality i
CVE-2026-89631
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's SMB client could allow a network-accessible attacker to trigger memory corruption by sending a malformed response. This could potentially lead to data exposure. Further investigation is needed to confirm if this SMB client feature is utilized and reachable in the environment.
CVE-2026-89630
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's SMB client could allow specially crafted network packets to cause unexpected behavior or system crashes during file-sharing operations. This issue impacts data handling within the kernel's network file transfer processing. While the exact impact remains under investigation, such vu
CVE-2026-89614
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver can lead to an out-of-bounds read when a file on a specially crafted volume is extended. This issue could potentially result in memory corruption.
CVE-2026-89613
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability has been resolved in the Linux kernel's NTFS filesystem driver. The issue stems from the handling of malformed file attributes, which could lead to system issues if processed. Exploitation would require local access to mount or process malicious filesystem images, making confirmation of local exposure p
CVE-2026-89612
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver allows for out-of-bounds memory access when processing an invalid MFT LCN from the boot sector. This could impact system integrity and availability if reachable, making it important to understand its potential effect on Linux systems.
CVE-2026-89611
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Linux kernel's NTFS driver where improper validation of attribute offsets in crafted Master File Table records could lead to file system corruption. This could potentially result in data loss or system instability. It is uncertain if this vulnerability is reachable or relevant in your envi
CVE-2026-89610
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Linux kernel's NTFS driver allows memory corruption and potential privilege escalation if the system processes a specially crafted NTFS image. The vulnerability arises because the driver validates the start of a data mapping but not its extension beyond the volume boundary. Exploitation requires local acc
CVE-2026-89558
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's RAID10 component could lead to silent data corruption during disk recovery operations. If a RAID10 array is degraded and a disk is recovered while data is being written, the system might incorrectly mark stale data as synchronized. This could result in data inconsistencies that are
CVE-2026-89555
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's MPLS packet processing. This could lead to system instability if specially crafted network packets are processed. The relevance and impact depend on the use of specific Linux network features.
CVE-2026-89551
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's SUNRPC component can lead to buffer underflow when processing specially crafted network data. This flaw might result in memory corruption and could impact system integrity. The potential for unintended behavior or data corruption makes this a concern for systems handling such netwo
CVE-2026-89550
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's SUNRPC component allows for insufficient validation of Kerberos authentication token lengths, potentially leading to denial-of-service conditions via a division-by-zero error when processing crafted tokens. This could impact system integrity and availability for services relying on
CVE-2026-89546
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's SUNRPC component could allow an attacker to disrupt NFS callback services by exploiting a race condition during service shutdown. This could lead to resource leaks and an inconsistent service state, potentially impacting system stability and the reliability of NFS operations.
CVE-2026-89542
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's SUNRPC component allows for out-of-bounds reads and integer underflows when processing certain authentication tokens. This could potentially lead to system instability or data corruption if the affected code path is triggered. Confirming the use of this kernel functionality within
CVE-2026-89541
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's SUNRPC component allows an attacker to cause out-of-bounds reads by sending a crafted RPCSEC_GSS reply, potentially leading to data disclosure or service disruption. The issue arises from integer overflow during length checks in responses from krb5p NFS servers. It is uncertain if
CVE-2026-89538
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability exists in the Linux kernel's SUNRPC implementation concerning Kerberos v2 tokens. It allows for malformed tokens with oversized fields to disrupt operations, potentially causing inconsistencies or service failures. Readers should care because this affects the integrity and availability of services using
CVE-2026-89537
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability exists in the Linux kernel's SUNRPC component that allows specially crafted, short network tokens to be processed by the Kerberos Message Integrity Check (MIC) verifier, potentially leading to out-of-bounds reads. This could result in denial of service or information disclosure if Kerberos GSS-API authe
CVE-2026-89536
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's SUNRPC component could lead to system instability or crashes if a race condition occurs during TLS handshake cancellation. This issue arises from improper handling of transport references during handshake callbacks. The exact impact and reachability are uncertain, but it involves c
CVE-2026-89533
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's RDMA component could lead to incorrect data handling due to arithmetic errors, potentially causing system instability or data corruption. Its exploitability is considered very unlikely as RDMA is typically used in isolated, high-speed networks, not exposed to the public internet.
CVE-2026-89532
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability exists in the Linux kernel's network data handling that could allow an unauthenticated attacker to cause a system crash via specially crafted network packets. This issue involves an out-of-bounds read when processing RDMA operations, potentially impacting system memory integrity and leading to a denial-
CVE-2026-89530
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in the Linux kernel's RPC-over-RDMA component where oversized data replies can overflow a buffer, corrupting memory. This could impact system stability if reachable by a client request. Confirming relevance and exposure within your environment is important.
CVE-2026-89526
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's RPC/RDMA component allows processing read chunks with invalid positions, potentially exposing adjacent memory. This could lead to unauthorized access to sensitive data by attackers exploiting improperly validated data chunks. The relevance depends on whether the affected technology
CVE-2026-89495
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The Linux kernel's OCFS2 component has a vulnerability where unchecked message lengths in DLM receive handlers can lead to memory corruption or system panics. An attacker already part of the cluster domain can exploit this by sending malformed messages, potentially impacting data integrity and service availability. Unc
CVE-2026-89494
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's OCFS2 component allows for system instability or data corruption if a node receives a specially crafted message. An out-of-bounds read or write can occur due to unvalidated length fields in the DLM_MIG_LOCKRES message, potentially leading to a system crash. Any node within the clus
CVE-2026-89492
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's OCFS2 file system allows for out-of-bounds reads when processing directory metadata. If a crafted on-disk image is mounted, operations on indexed directories could lead to memory corruption and potential system instability. The issue stems from a failure to properly validate direct
CVE-2026-89485
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's file locking mechanism could allow freed memory to be dereferenced, potentially causing system instability or crashes. This issue requires specific concurrent file operations to be exploited. Readers should confirm if this kernel component is in use within their environment.
CVE-2026-89482
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the NVMe-over-TCP driver could allow an unauthenticated attacker to cause memory corruption or a system crash. This occurs when specially crafted data is sent, potentially impacting system stability and data integrity. It is recommended to confirm if NVMe-over-TCP is in use and assess it
CVE-2026-89479
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's SCTP processing could allow specially crafted packets to be processed after an association is deleted, potentially leading to service disruption or unauthorized access. The issue is in the kernel's handling of network associations, and if an attacker can reach the affected componen
CVE-2026-89478
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's SCTP implementation can lead to a use-after-free condition when a transport is removed during network communication. This race condition, exploitable by an authenticated user sending a specific message, could result in system instability or unauthorized code execution if reachable.
CVE-2026-81002
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Linux kernel's networking stack related to zero-copy packet handling. If reachable, specially crafted packets could cause memory corruption, potentially leading to system instability. Confirming the use of affected configurations is important for system stability.
CVE-2026-80986
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's Shared Memory Communications protocol could allow an attacker to read out-of-bounds memory during link establishment. This may impact system stability. The relevance depends on the use of the SMC-Rv2 protocol and specific network configurations.
CVE-2026-80981
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's Shared Memory Communications (SMC) networking component, specifically within the `smc_llc_srv_add_link` function. This flaw could potentially lead to system instability or unintended behavior if triggered by a specific race condition during network link manage
CVE-2026-80980
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A race condition exists in the Linux kernel's Shared Memory Communications protocol, where concurrent updates to connection state flags can lead to data corruption. This could impact the integrity and availability of network connections. Confirmation is needed regarding the use and exposure of this kernel functionality
CVE-2026-80945
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's crypto driver may corrupt data during decompression fallback when a hardware analytics error occurs. This occurs because a memory buffer is still mapped for DMA from a device when the software fallback writes to it.
CVE-2026-80926
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A use-after-free vulnerability exists in the Linux kernel's ksmbd component, which handles file sharing. This flaw, triggered by a race condition during oplock break notifications when a connection is being torn down, could allow an authenticated client to access a resurrected, freed connection. This may lead to system
CVE-2026-53952
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A logic flaw in GetSimple CMS allows unauthenticated attackers to create new administrator accounts by exploiting a bug in the setup script's deletion process, potentially leading to unauthorized control over the content management system. The vulnerability arises because a security control intended to remove the `admi
CVE-2026-52630
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in Woltlab WCF, allowing remote attackers to alter user options and actions. This could compromise user data and system integrity if reachable. Confirmation of affected instances and potential exposure is advised.
CVE-2026-79396
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Xiongmai IP cameras have a critical vulnerability where hardcoded default credentials stored in plaintext allow remote attackers to gain full administrative control. This could enable unauthorized access to camera feeds and settings if affected devices are publicly accessible.
CVE-2026-79395
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An improper authentication flaw in Xiongmai IP Camera firmware's Sofia IPC daemon allows unauthenticated remote attackers to bypass security controls. This could enable unauthorized execution of privileged actions, such as controlling camera functions or rebooting the system. Uncertainty exists regarding specific produ
CVE-2026-62105
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A PHP object injection vulnerability exists in ThemeREX Addons that could allow unauthenticated attackers to execute arbitrary code. This impacts public-facing web applications, potentially leading to full website compromise if reachable. It is important to identify any instances of the affected plugin.
CVE-2026-62103
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated PHP Object Injection vulnerability exists in Everest Forms. If reachable, an attacker could exploit this flaw to compromise systems remotely. This impacts public-facing web forms, requiring confirmation of the plugin's presence and reachability within your environment.
CVE-2026-54072
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated attacker can exploit an open redirect vulnerability in the Authorizer authentication and authorization server by supplying a malicious redirect URI. This could lead to users being sent to attacker-controlled websites, potentially exposing sensitive tokens. The vulnerability was addressed in version 2
CVE-2026-82617
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Apache OpenNLP's text analysis functions could allow an attacker to disrupt service by providing specially crafted input that consumes excessive CPU or causes application threads to crash. This issue affects applications using specific built-in name-finding patterns without requiring authentication o
CVE-2026-72710
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A remote code execution vulnerability exists in SPIP software. Attackers can inject malicious data into the job queue, leading to the execution of arbitrary PHP code on the system if reachable. This could impact system data and service behavior.
CVE-2026-72709
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
SPIP contains a missing authorization flaw in administrative endpoints, allowing unauthenticated attackers to reset any user's password, including administrators, by using a valid HMAC-SHA256 nonce. This could lead to unauthorized account takeovers, impacting administrative control and data integrity.
CVE-2026-54047
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Laci Synchroni's backend has an improper authentication vulnerability where it trusts a user-provided UID from a local configuration file during OAuth2 login, allowing attackers to impersonate any user and perform actions on their behalf. The issue is resolved in version 1.2.3.
CVE-2026-3869
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in programmable logic controllers due to an incorrect authentication algorithm implementation. If reachable, this flaw could compromise the confidentiality, integrity, and availability of the PLC, potentially impacting industrial control processes. This matters because it could enable un
CVE-2026-89010
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
WAVLINK routers contain an unauthenticated OS command injection vulnerability. Attackers can exploit this by sending crafted filenames to a specific service, potentially executing arbitrary commands as root. This could lead to significant compromise of the network edge.
CVE-2026-87988
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An arbitrary file access vulnerability in Mistral Vibe allows bypassing workspace restrictions via commands classified as unconditionally allowed, potentially exposing sensitive information. Missing path validation enables access to files outside the active workspace without user approval.
CVE-2026-87987
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Mistral Vibe contains an arbitrary code execution vulnerability where environment variable assignments preceding allowlisted commands are not inspected, allowing bypass of permission checks and unauthorized code execution. This could enable an attacker to execute arbitrary code without user approval, the potential impa
CVE-2026-87986
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Mistral Vibe, allowing attackers to execute arbitrary commands by bypassing permission checks. This occurs when the parser fails to interpret specific shell constructs, enabling uninspected commands to run on the system without authorization. Organizations should verify if Mistral Vib
CVE-2026-87985
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An arbitrary code execution flaw exists in Mistral Vibe, where improperly inspected command arguments allow attackers to bypass permission checks and run malicious code on a user's system. This vulnerability is relevant if Mistral Vibe is deployed within your environment and could potentially be exposed, necessitating
CVE-2026-87984
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An arbitrary file write vulnerability in Mistral Vibe allows attackers to create or overwrite files outside the active workspace. This occurs because shell redirection destinations are not properly checked, enabling otherwise permitted commands to write to arbitrary paths accessible by the Vibe process, potentially imp
CVE-2026-89212
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical XML external entity vulnerability exists in the Akana API Platform due to improper restriction of references during XML-to-JSON processing. This could allow unauthenticated attackers to access sensitive information if the platform is reachable. It is important to confirm if this platform is in use and expose
CVE-2026-71644
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in drone trajectory planning software may allow an attacker to cause unsafe flight path planning and potential drone collisions. This could occur if the drone enters an idle state, triggering a missing default case that stops swarm trajectory publishing. The impact on operational safety and sys
CVE-2026-84390
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Fortinet FortiMonitorOnSight may allow an attacker to improperly access sensitive information due to flawed access controls in the source code. If reachable, this could lead to unauthorized access to system data. The absence of a specific attack vector means the exact impact is uncertain, but the pot
CVE-2026-80462
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Chef Automate's API gateway could permit an unauthenticated actor to gain elevated access to protected functionality under specific conditions. This raises concerns for systems using Chef Automate for centralized management and identity services. The potential for unauthorized access to administrativ
CVE-2026-89259
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Hugo, a static site generator, permits Node tools invoked during site builds to read and write files outside the project directory. This occurs when TailwindCSS is used with a permissive configuration, bypassing intended security restrictions. While the issue affects the build process, its reachabili
CVE-2026-89258
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Hugo allows bypassing path confinement through symlinks in parent directories, potentially disclosing unintended files in the built site. This occurs when symlinks are present in mounted directories and accessed via direct resource lookups, though themes fetched as Go modules are unaffected.
CVE-2026-89256
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
AVideo's Bookmark plugin has a stored cross-site scripting vulnerability where chapter names are not encoded, allowing a video owner to inject malicious scripts that execute in any visitor's browser. This impacts user experience by allowing script execution within the AVideo origin. Uncertainty exists regarding whether
CVE-2026-89255
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
AVideo's LoginControl plugin has a stored cross-site scripting vulnerability. An authenticated attacker can inject malicious JavaScript via a crafted PGP public key. This script can execute in an administrator's session when their profile is viewed, potentially leading to unauthorized actions. Readers should care becau
CVE-2026-89254
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
AVideo's CustomizeUser plugin contains a stored cross-site scripting vulnerability where an attacker with low privileges can inject malicious scripts. These scripts can execute when an administrator views certain pages or profile forms, potentially affecting web application integrity. Confirmation of AVideo usage and i
CVE-2026-89253
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
WWBN AVideo has a stored cross-site scripting vulnerability in its user donation link feature. If reachable, an authenticated user can inject JavaScript that executes in visitors' browsers when they interact with the donation button on a video watch page, potentially affecting administrators. The exact business impact
CVE-2026-89249
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stored cross-site scripting vulnerability exists in the AVideo YPTWallet plugin, allowing attackers to perform administrative actions by injecting malicious markup. This occurs when user-supplied CryptoWallet values are not properly escaped before being stored and later displayed to administrators. The threat is crit
CVE-2026-89243
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
WWBN AVideo software has a stored cross-site scripting vulnerability in its user group management feature. An administrator can inject malicious code into group names, which then executes in the browser of other administrators when they access the user manager interface. This requires privileged access and specific use
CVE-2026-86793
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
SGLang, used for AI model serving, has a vulnerability allowing unauthenticated code execution via pickle deserialization if authentication keys are not configured. This could enable attackers to run arbitrary code on affected servers reachable over the network, posing a risk to AI infrastructure.
CVE-2026-47839
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in federated OIDC authentication allows users to gain unintended administrative scope when specific group mapping and wildcard whitelist configurations are used. This could permit unauthorized access to sensitive administrative functions, making it important to verify the configuration of external ident
CVE-2026-14563
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the advanced-customized-prompts WordPress plugin enables unauthenticated attackers to bypass password verification, allowing them to log in as any user or create new accounts. This could lead to unauthorized control over WordPress sites and their data.
CVE-2026-14560
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A WordPress plugin vulnerability allows unauthenticated attackers to upload and execute arbitrary PHP files on a server. This could lead to code execution, impacting website integrity and availability. The issue stems from the plugin's failure to properly validate uploaded files.
CVE-2026-14559
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in a WordPress plugin that allows unauthenticated attackers to log in as any registered user, including administrators, by submitting only a user's email address. This could lead to unauthorized administrative control of the website and potential compromise of its integrity and data.
CVE-2026-8778
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in a WordPress plugin for WooCommerce checkout fields, allowing unauthenticated attackers to upload arbitrary files to the server. This could potentially lead to remote code execution, impacting website integrity and availability. It is important to determine if your site uses this plugi