Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Palo Alto Networks Expedition Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Palo Alto Networks Expedition OS Command Injection
Palo Alto Networks Expedition SQL Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0...
GeoVision Devices OS Command Injection
A misconfiguration in the fingerprint authentication mechanism of Binance: BTC, Crypto and NFTS v2.85.4, allows attackers to bypass authe...
The software tools used by service personnel to test & calibrate the ventilator do not support user authentication.
The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent...
The ventilator's microcontroller lacks memory protection.
The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form.
The debug port on the ventilator's serial interface is enabled by default.
The ventilator does not perform proper file integrity checks when adopting firmware updates.
Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unautho...