Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical Cyberpower Powerpanel privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Cyberpower Powerpanel privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Code-projects Budget Management SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code.
Hard-coded credentials are used by the CyberPower PowerPanel platform to authenticate to the database, other services, and the cloud.
An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an...
CyberPower PowerPanel business application code contains a hard-coded JWT signing key.
CyberPower PowerPanel business application code contains a hard-coded set of authentication credentials.
Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter.
Google Chromium V8 Type Confusion