Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
VMware ESXi And Workstation Out-of-Bounds Write is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Uniguest Tripleplay RCE (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Uniguest Tripleplay RCE (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
VMware ESXi and Workstation TOCTOU Race Condition
VMware ESXi Arbitrary Write
VMware ESXi, Workstation, and Fusion Information Disclosure
Linux Kernel Use of Uninitialized Resource
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary cod...
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary cod...
On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.
Edimax IC-7100 IP Camera OS Command Injection
When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path...
Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username
A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.
The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration.
conda-forge-metadata provides programatic access to conda-forge's metadata.