NVD disclosure day
CVE-2026-123614
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in imgproxy's ICO loader allows remote attackers to trigger a heap buffer overflow by submitting a crafted ICO image, potentially leading to process crashes or code execution. This issue is relevant if your services process ICO files with imgproxy.
CVE-2026-123551
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
OpenAM has an information disclosure vulnerability allowing unauthenticated attackers to read live session tokens from the notification WebSocket. This could enable attackers to hijack user and administrator sessions. Confirming your OpenAM instances' exposure and business criticality is advised.
CVE-2026-123550
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
OpenAM's SAML service provider has an authentication bypass vulnerability, allowing unauthenticated remote attackers to submit forged assertions and obtain sessions as any user, including administrators. This could lead to single sign-on hijacking for dependent applications.
CVE-2026-123549
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
OpenAM is vulnerable to an attribute bypass during self-registration, allowing anonymous attackers to gain administrative privileges by manipulating restricted attributes. This could lead to full control of the platform.