Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
SAP Commerce Cloud Deserialization is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Oretnom23 Online Medicine Ordering System privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
D-Link DIR-820 Router OS Command Injection
DrayTek Multiple Vigor Routers OS Command Injection
SAP Commerce Cloud Deserialization of Untrusted Data
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11.
Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control.
Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthent...