NVD disclosure day
CVE-2026-94089
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in a D-Link router's authentication handler, allowing remote attackers to cause a stack-based buffer overflow by manipulating login credentials. This issue is publicly disclosed and exploitable, potentially impacting device functionality. It is important to identify if this specific rout
CVE-2026-88857
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in a Joomla extension allows authenticated, privileged users to upload and execute code. If reachable, an attacker could upload a malicious PHP file disguised as an image, leading to remote code execution. This is a concern for environments using this specific Joomla extension, requiring confirmation of
CVE-2026-88856
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability exists in an OrdaSoft Joomla extension that allows privileged users to execute arbitrary code on the server. This occurs when the extension processes a JSON request by calling a PHP function directly, without validation. While this requires administrative access, it could lead to a compromise of system
CVE-2026-88854
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in a Joomla extension's search function, allowing attackers to access arbitrary database content. This issue requires confirmation of the extension's usage to assess potential data exposure.
CVE-2026-90817
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in REDCap's survey and data import logic allows unauthenticated attackers to execute arbitrary code on the server by manipulating HTTP requests. This could lead to server compromise if a public survey hash is known.
CVE-2026-94107
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A predictable password reset token vulnerability exists in NivoCart's forgotten password endpoint. Attackers aware of an administrator's email could potentially predict the recovery code to gain unauthorized administrative access to the system. This affects the security of administrative accounts within the NivoCart e-
CVE-2026-94003
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stack-based buffer overflow vulnerability exists in the web management interface of the Comfast CF-N1-S. Remote, unauthenticated attackers can exploit this by sending malicious input to the `get_css_path_from_uri` function, potentially leading to system compromise. The public disclosure of an exploit increases the ri
CVE-2026-94084
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Suricata, a network security monitoring tool, has a critical use-after-free vulnerability in its HTTP/2 traffic inspection. This flaw could allow an attacker to impact data integrity and availability if reachable, necessitating a review of its relevance and exposure within the environment.
CVE-2026-94083
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A type confusion vulnerability in Suricata's DoH2 protocol handling can lead to an invalid free error. This may affect the integrity and availability of the Suricata service if the app-layer DoH2 feature is enabled and reachable by specially crafted requests.