Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Zyxel EMG2926 Routers Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Lovasoa Sqlpage SQL injection (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Samsung Mobile Devices Use-After-Free
Laravel Ignition File Upload
Zyxel EMG2926 Routers Command Injection
Realtek SDK Improper Input Validation
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attacker...
NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management ac...
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary comman...
Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of action...
Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service...
SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate privileges via the...
SQLpage is a SQL-only webapp builder.