Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
VMware Workspace ONE Access And Identity Manager RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Swiftsensors Sg3-1010 Firmware RCE (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Accusoft Imagegear Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
A heap-based buffer overflow vulnerability exists in the Palette box parser functionality of Accusoft ImageGear 19.10.
An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4.
An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway SG3-1010.
An issue was discovered in ThoughtWorks GoCD before 21.3.0.
GeoWebCache is a tile caching server implemented in Java.
Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6...
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7.
nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved w...
A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46...