Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Mitel MiVoice Connect Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Flatpress Path Traversal (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Hour Of Code Python 2015 Project Hour Of Code Python 2015 Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
IBM Aspera Faspex Code Execution
Mitel MiVoice Connect Command Injection
Mitel MiVoice Connect Code Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.
A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a factory default misc...
A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to compromise user acc...
hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the requ...
MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package (requiremen...
TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.
An access control issue in Axcora POS #0~gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors.
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
GeoTools is an open source Java library that provides tools for geospatial data.