Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
North Grid Proself XXE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Zyxel Multiple Firewalls Path Traversal
ProjectSend Improper Authentication
North Grid Proself Improper Restriction of XML External Entity (XXE) Reference
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code.
An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500).