Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Linux Kernel privilege escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Sdg Pnpscada SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Optoma 1080pstx Auth Bypass (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Multiple Ruckus Wireless Products CSRF and RCE
Red Hat Polkit Incorrect Authorization
Apache Tomcat Remote Code Execution
Oracle Java SE and JRockit Unspecified
Jenkins User Interface (UI) Information Disclosure
Linux Kernel Race Condition
Linux Kernel Improper Input Validation
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticat...
The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQL Injection vulner...
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.
An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials.
SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the contestan...
File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary co...
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the...
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the...
Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation.