Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical Danfoss Ak-em100 Firmware SQL Injection (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Danfoss Ak-em100 Firmware Command Injection (CVSS 9.9) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
High-risk exposure
New high-severity Danfoss Ak-em100 Firmware XSS — watch for exploit drops and scanner noise in the first 72 hours after disclosure.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.
The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.
The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application paramet...