NVD disclosure day
CVE-2026-125795
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in a PHP application allows local file inclusion, potentially exposing sensitive information or enabling unauthorized code execution. This issue affects the Estatik plugin. Its network-reachable nature and critical severity mean that if the affected technology is in use and reachable, it could lead to s
CVE-2026-129483
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Cyrus SASL's SRP server mechanism allows unauthenticated network clients to bypass authentication. Attackers can impersonate any user without a password and obtain session keys by sending a specially crafted public value. This could compromise user accounts and systems relying on this authen
CVE-2026-125769
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical privilege escalation vulnerability in Nasir Ahmed's Advanced Form Integration software could allow unauthenticated attackers to gain unauthorized control over affected systems. This issue is reachable via the network and may impact system data and configuration. Confirming organizational use and assessing bu
CVE-2026-122662
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical deserialization vulnerability in the Document Library Pro plugin could allow attackers to inject malicious code and execute arbitrary commands without authentication. This poses a risk to system data and service behavior if the plugin processes untrusted input. Security-aware leaders should confirm if this p
CVE-2026-129349
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Apache Shiro's authentication caching, when enabled on specific LDAP realms, allows an attacker to bypass password checks after a legitimate user logs in once. This could lead to unauthorized access to systems by enabling subsequent logins with any password for a known username. Organizations using t
CVE-2026-129444
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in the FTP Daemon component of D-Link DSL-6740C devices, allowing manipulation of hard-coded credentials. This issue is remotely exploitable, and public exploits are available, posing a risk of unauthorized access to the device and its network resources.
CVE-2026-129354
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A stack-based buffer overflow vulnerability in the HNAP Handler of D-Link routers can be exploited remotely. Successful exploitation could lead to compromise of the device. An exploit has been published, increasing the risk of its use.
CVE-2026-129353
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in D-Link DIR-600L devices affecting the authentication function. This flaw allows for remote exploitation through a stack-based buffer overflow, with a public exploit available. An attacker could potentially gain unauthorized access or control when the vulnerable function is reached.