NVD disclosure day
CVE-2026-12944
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
IBM Langflow OSS contains a vulnerability allowing attackers to execute arbitrary Python code as root. This can lead to AWS credential theft, data exfiltration, and lateral movement within internal networks. The vulnerability is reachable via network access to the server.
CVE-2026-86881
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A certificate validation flaw in Apple operating systems could allow an attacker with a compromised intermediate certificate authority to issue fraudulent certificates. This might enable the impersonation of legitimate services, potentially leading to data compromise or unauthorized access. Confirmation of relevance to
CVE-2026-84625
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A permissions issue in Apple operating systems could allow an app to fingerprint users by gathering identifying information, potentially impacting user privacy.
CVE-2026-84609
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A permissions issue in Apple operating systems allows an app to modify protected system files, impacting system integrity. This vulnerability, fixed in various OS versions, could lead to system instability if exploited. The relevance of this issue depends on the presence of installed applications on affected devices.
CVE-2026-84561
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory management vulnerability in Apple operating systems may allow an application to cause unexpected system termination or corrupt kernel memory. While this has been addressed in recent software updates, the concern is confirming relevance and exposure to this system-level issue. Users should verify system exposur
CVE-2026-84520
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical buffer overflow vulnerability in macOS kernel, fixed in macOS Golden Gate 27, could allow a local attacker to cause system termination or kernel memory corruption.
CVE-2026-67399
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Deserialization of untrusted data in WHMCS allows remote attackers to execute arbitrary code. This vulnerability arises when the application processes untrusted data, potentially leading to unauthorized code execution on the server. The primary concern is to identify affected WHMCS installations and assess their exposu
CVE-2026-65414
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An out-of-bounds write vulnerability in Apple operating systems could allow a remote attacker to cause unexpected app termination or execute arbitrary code. This issue is addressed with improved bounds checking. The exact data or systems that could be affected are not specified.
CVE-2026-65381
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A validation issue in macOS entitlement verification could allow a malicious application to escape its sandbox. This may enable unauthorized access to system data or actions, depending on the application's entitlements.
CVE-2026-53713
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unpatched Envoy Gateway can allow an authenticated attacker to read arbitrary files from the gateway controller pod, potentially exposing sensitive credentials. This vulnerability arises from improper handling of redundant path separators before a security check. If exploited, disclosed credentials could grant acces
CVE-2026-43790
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in macOS could allow remote attackers to cause unexpected system termination or corrupt kernel memory. This vulnerability impacts core operating system functions, and while typically not directly exposed to the internet, its relevance to specific environments requires confirmation.
CVE-2026-55209
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The resdata software, used for processing reservoir simulation files, contains a vulnerability where it insufficiently validates data while parsing GRDECL files. This can lead to memory corruption or service termination if the software is exposed to untrusted files via a network service.
CVE-2026-54334
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A heap corruption vulnerability in the UEFI Firmware Parser can occur when processing crafted firmware files, potentially leading to a crash or code execution. This affects the parser's ability to handle firmware structures.
CVE-2026-54333
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the UEFI Firmware Parser allows a crafted firmware file to corrupt stack memory, potentially leading to a crash or code execution. The parser handles BIOS, Intel ME, and UEFI firmware structures. This issue is concerning if the parser processes untrusted firmware.
CVE-2026-50006
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An SQL query engine, Anyquery, has a vulnerability allowing unauthenticated remote attackers to create or overwrite files. This can lead to filesystem integrity loss and denial of service, with a possibility of remote code execution depending on other services or process privileges. It is important to confirm if Anyque
CVE-2026-16338
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An arbitrary file write vulnerability exists in IBM DataStage, allowing authenticated users to write files to any location due to improper path validation. This could compromise system integrity if the affected technology is in use and reachable. Organizations should confirm their use of IBM DataStage and assess its ex
CVE-2026-59178
Halo Surface Signal: 3 out of 5 — possibly public-facing.
The ESPHome Device Builder Dashboard may lose authentication when upgraded, potentially exposing it to unauthorized access if reachable on a network. This could allow unauthenticated users to interact with device management functions. Confirming its presence and network exposure is advisable.
CVE-2026-90945
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A hard-coded secret in Crawlab allows unauthenticated attackers to forge administrator tokens, potentially leading to code execution on worker nodes. This affects Crawlab through version 0.6.3.
CVE-2026-90942
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Casdoor's certificate endpoints expose a built-in private key, enabling an organization administrator to forge JWT tokens for any user, including global administrators, across all organizations. This could grant unauthorized access to critical systems.
CVE-2026-57578
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The DotVVM framework has an authorization flaw where a filter may fail to perform necessary checks, potentially exposing protected commands, view models, or presenters to unauthorized requests. This issue could allow unauthenticated access to sensitive application features.
CVE-2026-76461
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in Cisco Secure Email Gateway's email parsing, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges by sending crafted emails. The affected technology is an internet-facing email security gateway, making it reachable for exploitation. Understanding
CVE-2026-76443
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Cisco Secure Email Gateway and Web Manager products contain vulnerabilities due to improper neutralization. If reachable, an attacker could exploit these flaws, potentially leading to critical impact, such as arbitrary code execution. Organizations using these Cisco products should confirm their relevance and assess po
CVE-2026-76441
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Cisco Secure Email Gateway and Secure Email Manager have improper access control vulnerabilities that allow unauthenticated remote attackers to impact confidentiality, integrity, and availability. These internet-facing products are externally reachable, posing a risk to system configuration and email data.
CVE-2026-76440
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Path traversal vulnerabilities in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated attacker to access or modify sensitive system files. These issues could impact the security of email communications if exploited.
CVE-2026-20353
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Cisco Secure Email Gateway and Web Manager have critical resource control vulnerabilities that could allow an unauthenticated attacker to compromise confidentiality, integrity, and availability. It is uncertain if specific products or versions are exploited. The potential impact warrants confirmation of their use and e
CVE-2026-90943
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A stored cross-site scripting vulnerability exists in a comment rendering component, allowing authenticated users to inject malicious scripts. These scripts execute in the browsers of other users viewing the comments, potentially enabling session token theft and unauthorized actions. The impact is dependent on the comm
CVE-2026-61534
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A prototype pollution vulnerability in the Yayson JavaScript library allows attackers to modify the application's global `Object.prototype` by sending specially crafted JSON:API data, potentially causing denial of service or logic corruption.
CVE-2026-57145
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the PraisonAI multi-agent system allows prompt-influenced agents to read or overwrite files due to improper handling of file paths. This could lead to the exposure of secrets and application tampering, impacting system integrity and confidentiality.
CVE-2026-57131
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the PraisonAI multi-agent system allows unauthenticated network clients to submit attacker-controlled prompts and agent configurations. This can expose service credentials and connected tool capabilities, potentially leading to unauthorized agent execution. This issue impacts PraisonAI's job
CVE-2026-57127
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the PraisonAI multi-agent system allows unauthenticated access to recipe execution and tool triggering when API authentication is not properly configured. This could enable unauthorized users to execute connected tools. The relevance and exposure of this vulnerability to your environment sho
CVE-2026-57124
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
PraisonAI's UI host applications have a critical vulnerability allowing unauthenticated network access to execute arbitrary commands. This could lead to system compromise if the affected technology is in use and reachable. Confirm usage and exposure to assess risk.
CVE-2026-82435
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in a message decoder allows unauthenticated network access to trigger large memory allocations, potentially impacting service availability. The exact effect on worker stability is unmeasured but could lead to resource exhaustion. The primary concern is confirming if this component is deployed a
CVE-2026-82434
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Apache Storm allows unauthorized users with read-only topology permissions to obtain ZooKeeper credentials. These credentials can be used to forge or remove topology state, impacting cluster operations. The credential may also be logged, further increasing exposure. The recommended fix is to upgrade
CVE-2026-82431
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A flaw in Apache Storm's access control allows any authenticated user to perform unauthorized operations if cluster access is restricted by group alone and no users are specified. This bypasses intended security measures, permitting actions like submitting topologies or accessing cluster configurations. This issue is r
CVE-2026-57125
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in the PraisonAI multi-agent system, allowing unauthenticated remote attackers to execute arbitrary operating-system commands. This occurs when specially crafted API requests bypass approval checks, leading to the execution of commands without credentials. Readers should care because thi
CVE-2026-57123
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in PraisonAI's multi-agent system allows unauthenticated invocation of registered tools, potentially leading to file, shell, or code execution. This arises from certain server components binding to all network interfaces without proper security controls, making them reachable and exploitable via direct
CVE-2026-90961
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Certain authentication plugins in MISP allow unauthenticated bypass if an attacker knows a valid user's email address. This can grant unauthorized access with the impersonated user's privileges, including sensitive threat intelligence data. The vulnerability requires the affected plugin to be enabled.
CVE-2026-82441
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Apache Storm's Nimbus component allows for unvalidated topology submissions, potentially leading to the deletion of critical files or cluster leadership disruption. An attacker could exploit this by submitting a crafted topology with malicious blobstore keys, causing Nimbus to delete other topologies
CVE-2026-82439
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in DRPC servers allows unauthenticated attackers to exhaust server memory by sending unique function names, potentially causing a denial of service. The issue occurs because the server retains entries for these names indefinitely, and the default configuration requires no authentication to reach the aff
CVE-2026-73370
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An incorrect authorization vulnerability in Apache Syncope allows administrators without adequate permissions to perform unauthorized actions due to incomplete security checks in the Reconciliation service. This could impact system integrity and confidentiality. It is uncertain if specific instances are affected or exp
CVE-2026-90937
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Froxlor fails to validate newline characters in subdomain redirect URLs, allowing authenticated users to inject arbitrary web server configuration directives. This can lead to web server corruption, denial of service, or hijacking of responses for hosted domains.
CVE-2026-78330
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An incorrect privilege assignment vulnerability exists in Apache Syncope. If internal JWKS settings for JWT authentication are exposed, an attacker could gain administrative privileges after authenticating with a low-privilege token. This elevates the importance of verifying the relevance and exposure of your Syncope i
CVE-2026-78299
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Eclipse Embedded CDT allows arbitrary file writes if a compromised archive is extracted, potentially overwriting critical files. The exploitation requires user interaction within a developer environment, limiting direct operational impact but still necessitating security review.
CVE-2026-77181
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An authorization flaw in Apache Syncope could allow unintended changes to client applications by improperly checking permissions. This impacts administrators managing client applications, potentially leading to unauthorized actions if the vulnerability is reachable. The relevance of this issue depends on how Apache Syn
CVE-2026-77051
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A SQL injection vulnerability exists in Apache Syncope, an identity management system, where an administrator with adequate privileges can execute arbitrary SQL commands by exploiting unsanitized parameters. This could lead to unauthorized data access or manipulation within the database.
CVE-2026-75030
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Apache Syncope has a critical authorization vulnerability allowing administrators with task execution entitlements to mass (de)provision group members beyond their intended capabilities. This could lead to unauthorized modifications of group memberships, impacting identity management. Confirm Syncope usage and exposure
CVE-2026-73668
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An incorrect authorization vulnerability exists in Apache Syncope. An administrator with adequate entitlements in one realm may be able to read confidential connector configuration from another realm via REST, potentially allowing them to duplicate connector instances. This impacts identity management controls. Confirm
CVE-2026-73579
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authorization vulnerability in Apache Syncope can allow unauthorized access to data by bypassing access restrictions during search operations. If reachable, this could lead to unauthorized access to search results, potentially exposing sensitive information. It is important to verify if this software is in use and a
CVE-2026-73470
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An Improper Privilege Management vulnerability in Apache Syncope could allow unauthorized creation or modification of delegations, potentially impacting access controls. This issue may affect the integrity and availability of the system's access control mechanisms. It is important to confirm if Apache Syncope is in use
CVE-2026-12258
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An inadequate access control in Hiperdino’s REST API allows an attacker with a static bearer token to enumerate customer contact details via a public endpoint. This vulnerability could lead to information disclosure of registered users' telephone numbers and email addresses.
CVE-2026-90919
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in LightLLM's Config Server, allowing unauthenticated attackers to execute arbitrary code remotely by sending a malicious serialized payload via a WebSocket endpoint. This could lead to unauthorized control of the server process. Readers should care due to the potential for system compro
CVE-2026-21391
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in PingAM allows attackers to bypass authentication controls by manipulating ID Token claims, potentially leading to privilege escalation or impersonation.
CVE-2026-90898
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Bifrost's management API allows unauthenticated attackers to register MCP clients and execute arbitrary commands as the Bifrost process. This can occur if authentication is disabled, potentially impacting system integrity and availability.
CVE-2026-87802
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An improper cryptographic signature verification vulnerability in Apache Syncope allows an attacker to forge JWTs, impersonate users, and gain unauthorized access to proxied services when OAuth 2.0 is configured without a JWKS URI. This could lead to the compromise of sensitive data and services.
CVE-2026-87785
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Apache Syncope has an authentication bypass vulnerability where an attacker can spoof user privileges if JWKS settings are disclosed. This could allow unauthorized access to user data and controls. Confirming the exposure and relevance of Syncope deployments is important for security.
CVE-2026-86460
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A Cypher injection vulnerability exists in the Neo4j persistence layer of Apache Syncope when processing specific FIQL search conditions. If reachable, an attacker could exploit this to manipulate database queries, potentially leading to unauthorized access or modification of data.
CVE-2026-82232
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical SQL injection vulnerability exists in Apache Syncope, allowing an authenticated administrator to execute arbitrary SQL via unsanitized sort clauses in task searches. This could lead to data compromise or unauthorized system control. Confirm if your Syncope instances are affected and if administrative access
CVE-2026-90693
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical stack-based buffer overflow vulnerability exists in D-Link DIR-878 routers within the WAN Settings function. This flaw can be exploited remotely by an attacker with network access to execute arbitrary code, potentially compromising the device and its network traffic.
CVE-2026-90692
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in D-Link DIR-878 devices within the Dynamic DNS IPv6 Settings, allowing remote attackers to trigger a stack-based buffer overflow by manipulating IPv6 address or hostname arguments. This could lead to a compromise of the device's integrity and availability, impacting network stability.
CVE-2026-85192
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in a Joomla extension where authenticated, privileged users can execute remote code by embedding PHP within article content. Publishing such an article triggers the code to run as the web server process, potentially compromising the server and its data. The relevance and exposure of this
CVE-2026-90680
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical buffer overflow vulnerability exists in the HNAP1 component of D-Link routers. Remote attackers can exploit this flaw by manipulating network settings, potentially leading to system compromise. It is important to determine if this technology is in use and assess any potential exposure.