Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Apple Multiple Products RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Contiki-ng Tinydtls DoS (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Webkul Bundle Product SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Apple Multiple Products WebKit Type Confusion
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.
Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redis...
An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02.
An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02.
An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive informati...
SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id_product paramete...
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a...
Whoogle Search is a self-hosted metasearch engine.
Whoogle Search is a self-hosted metasearch engine.
SOFARPC is a Java RPC framework.