Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Qualcomm Multiple Chipsets Memory Corruption is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Sangoma Img2020 Firmware RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Qualcomm Multiple Chipsets Incorrect Authorization
Qualcomm Multiple Chipsets Incorrect Authorization
Qualcomm Multiple Chipsets Use-After-Free
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
An issue was discovered in Samsung Mobile Processor Exynos 1380.
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthentic...
A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution.
In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's abili...
Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx...
Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data".
/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.
The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versio...
Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs.
billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to exec...