Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Ivanti Endpoint Manager (EPM) SQL Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Cisco Nexus Dashboard Fabric Controller Command Injection (CVSS 9.9) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Ivanti Endpoint Manager (EPM) SQL Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
New critical Cisco Nexus Dashboard Fabric Controller Command Injection disclosed.
An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.
Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges vi...
An unauthenticated remote attacker may use a missing authentication for critical function vulnerability to reboot or erase the affected d...
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping.
FileSender before 2.49 allows server-side template injection (SSTI) for retrieving credentials.
Synacor Zimbra Collaboration Suite (ZCS) Command Execution
The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability.