Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical QNAP Network Attached Storage (NAS) privilege escalation (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Codologic Codoforum SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Oracle Communications Eagle Memory Corruption (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authe...
An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.
An issue was discovered in Wind River VxWorks 7.
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
QNAP NAS Improper Authorization
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.