Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Cisco IOS DoS is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Vibethemes Bp Social Connect Auth Bypass (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Sem-cms Semcms SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Samsung Mobile Devices Insertion of Sensitive Information Into Log File
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure
Cisco IOS Denial-of-Service
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5.
SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php.