Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Oracle Agile Product Lifecycle Management (PLM) privilege escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Mayuresh82 Gocast Command Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Apple Multiple Products Code Execution
Apple Multiple Products Cross-Site Scripting (XSS)
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3.
An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3.
An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3.
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users wit...
D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the msp_info_htm function via the flag parameter and cmd parameter.
An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbitrary code via up...
An arbitrary file upload vulnerability in the component \Users\username.BlackBoard of BlackBoard v2.0.0.2 allows attackers to execute arb...
Wowza Streaming Engine below 4.9.1 permits an authenticated Streaming Engine Manager administrator to define a custom application propert...
An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote c...