Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 9.6) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices.
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects Wish...
EVerest is an EV charging software stack.
14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function.
Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-...
ServiceNow Incomplete List of Disallowed Inputs
Palo Alto Networks Expedition Missing Authentication
New critical Gaizhenbiao Chuanhuchatgpt exposure disclosed.
New critical Gaizhenbiao Chuanhuchatgpt DoS disclosed.
Sensitive information disclosure in NetScaler Console