Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Daily summary
Citrix NetScaler ADC And Gateway added to CISA KEV — confirmed in-the-wild exploitation.
10 new critical disclosures — review patch status on exposed services.
Top threats today
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
CVE-2025-5777Citrix NetScaler ADC and Gateway Out-of-Bounds Read
Actively exploited (CISA KEV)
Listed on CISA KEV
Citrix NetScaler ADC And Gateway Out-of-Bounds Write is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
CVE-2025-47812Wing FTP Server Improper Neutralization of Null Byte or NUL Character
CVSS 10
Remote code execution exposure
New critical Wing FTP Server RCE (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
High-risk exposure
CVE-2025-2523The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the...
CVSS 9.4
Remote code execution exposure
New critical-severity CVE in today's window — elevated exposure signal, early in the lifecycle.