Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Cisco NX-OS Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Cisco NX-OS Command Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Command go env is documented as outputting a shell script containing the Go environment.
Inadequate input validation exposes the system to potential remote code execution (RCE) risks.
A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs.
Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access.
The vulnerability allows attackers access to the root account without having to authenticate.
A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficientl...
Under certain circumstances the web interface will accept characters unrelated to the expected input.
GeoTools is an open source Java library that provides tools for geospatial data.
mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device.
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is v...