Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Apache Airflow Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Active exploit activity
Public exploit or PoC linked — exploitation bar is lower than disclosure-only CVEs.
Critical exposure
New critical Softvibe Saraban RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Aviatrix Controller Unrestricted Upload of File
October CMS Improper Authentication
Microsoft Exchange Server Information Disclosure
VMware Server Side Request Forgery in vRealize Operations Manager API
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
System Information Library for Node.JS Command Injection
Nagios XI OS Command Injection
Nagios XI OS Command Injection
Nagios XI OS Command Injection
Drupal core Un-restricted Upload of File
Apache Airflow's Experimental API Authentication Bypass
Oracle Business Intelligence Enterprise Edition Path Transversal
An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices.
Nothing flagged in this category for this digest.
A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem...
SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file exte...
Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication,...
An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0.
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are conv...
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations.