Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Justice AV Solutions Viewer privilege escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Progress Telerik Report Server Auth Bypass (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to...
The WP STAGING WordPress Backup Plugin – Migration Backup Restore plugin for WordPress is vulnerable to arbitrary file uploads due to mis...
Progress Telerik Report Server Authentication Bypass by Spoofing
MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disable...