Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Ivanti Endpoint Manager Mobile (EPMM) Auth Bypass is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Vocera Report Server Path Traversal (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Infodrom E-invoice Approval System SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Ivanti Endpoint Manager Mobile Authentication Bypass
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8.
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software E-Invoice Approva...
Improper Neutralization of Special Elements Used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache I...
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sen...
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sen...
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sen...
Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_edit...
Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersio...