Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Netwrix Auditor RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Active exploit activity
VMware Tanzu Spring Cloud RCE now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical Vivawallet Viva Wallet SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Microsoft Windows MSHTML Platform Privilege Escalation
Microsoft Windows Defender SmartScreen Security Feature Bypass
Microsoft Outlook Security Feature Bypass
Microsoft Windows Error Reporting Service Privilege Escalation
Netwrix Auditor Insecure Object Deserialization
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.
Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted sc...
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.
VMware Tanzu Spring Cloud Function Remote Code Execution
Nothing flagged in this category for this digest.
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotel...
SQL injection vulnerability found in PrestaShop vivawallet v.1.7.10 and before allows a remote attacker to gain privileges via the vivawa...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards.
WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload.
xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE).