Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
GeoVision Multiple Devices Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Wegia SQL Injection (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
GeoVision Devices OS Command Injection
GeoVision Devices OS Command Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
New critical Cisco Ios Xe exposure disclosed.
SysAid On-Prem Improper Restriction of XML External Entity Reference
SysAid On-Prem Improper Restriction of XML External Entity Reference
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing fu...
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.
On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enable...
The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_wp_ajax_fe...
WeGIA is a web manager for charitable institutions.
Unrestricted Upload of File with Dangerous Type vulnerability in Themefic BEAF beaf-before-and-after-gallery allows Upload a Web Shell to...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Productive Minds Productive Commerc...