Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Zyxel DSL CPE Devices Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Ivanti Connect Secure RCE (CVSS 9.9) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Wpgateway Privilege Escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Microsoft Windows Storage Link Following
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow
Zyxel DSL CPE OS Command Injection
Zyxel DSL CPE OS Command Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The WPGateway Plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.5.
Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenti...
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privil...
Logsign Unified SecOps Platform Authentication Bypass Vulnerability.
A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote c...
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vuln...
Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey.
Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to sa...