NVD disclosure day
CVE-2026-124580
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical command injection vulnerability exists in the Weixin authentication endpoint of network appliances. Attackers can exploit this remotely to execute arbitrary commands, potentially compromising device functionality and data, due to publicly available exploit details. The vendor has not responded to the disclos
CVE-2026-113364
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical buffer overflow vulnerability exists in NEC WebSAM WinShare, allowing unauthenticated remote attackers to execute arbitrary code with SYSTEM privileges via a crafted network packet. This could lead to unauthorized control of affected systems. Confirm your deployment of this software and its network exposure.
CVE-2026-113363
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in NEC WebSAM WinShare allows unauthenticated remote attackers to execute arbitrary commands with SYSTEM privileges via crafted network packets due to improper input validation. This could affect system data and service behavior, making it critical to identify deployments, assess network reachability, a
CVE-2026-119506
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the DynamiApps Frontend Admin plugin allows privilege escalation. Unauthenticated users could gain elevated access if the component is reachable, potentially leading to unauthorized administrative control and system changes. Confirming its presence and exposure is crucial.