Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Ivanti Cloud Services Appliance (CSA) Path Traversal is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Ergophone Sip-t28p Firmware Directory Traversal (CVSS 9.9) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Linuxfoundation Dragonfly Auth Bypass (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Ivanti Cloud Services Appliance (CSA) Path Traversal
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Dragonfly is an open source P2P-based file distribution and image acceleration system.
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.
Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary fi...
An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to ex...
Traefik is a golang, Cloud Native Application Proxy.
Kastle Systems firmware prior to May 1, 2024, contained a hard-coded credential, which if accessed may allow an attacker to access sensit...
sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ece Software Electronic Tick...
The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin bei...