Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
VMware Tools Auth Bypass is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Active exploit activity
Public exploit or PoC linked — exploitation bar is lower than disclosure-only CVEs.
Critical exposure
New critical Inspireui Mstore Api SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Apple Multiple Products Integer Overflow
Apple Multiple Products WebKit Memory Corruption
Apple Multiple Products WebKit Type Confusion
Zyxel Multiple NAS Devices Command Injection
VMware Tools Authentication Bypass
A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensiti...
NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file.
Nothing flagged in this category for this digest.
Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server.
Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server.
The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and in...
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.
PHP-IMAP is a wrapper for common IMAP communication without the need to have the php-imap module installed / enabled.