NVD disclosure day
CVE-2026-114661
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
OpenRemote software has a missing authorization vulnerability in its GatewayServiceResource that allows any authenticated user to control gateway tunnels, potentially creating persistent network connections into an edge gateway's network or disrupting existing ones. This could impact secure remote access and management
CVE-2026-114575
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A command injection vulnerability exists in TOTOLINK routers within the `UploadCustomModule` function. This flaw allows remote attackers to execute arbitrary commands on the device, potentially impacting router integrity and network traffic. The exploit has been published, making it a significant concern for network se
CVE-2026-110264
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An integer overflow vulnerability in GitLab allows unauthenticated users to execute arbitrary code by compiling a crafted regular expression, potentially impacting server integrity and availability.