Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
XWiki Platform RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Veeam Backup \& Replication RCE (CVSS 9.9) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions
XWiki Platform Eval Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard.
Nagios XI versions prior to 2024R1.3.2 contain a remote command execution vulnerability in the WinRM Configuration Wizard.
Nagios XI versions prior to 2024R1.0.1 contain a privilege escalation vulnerability in the System Profile component.
Nagios XI versions prior to 2024R1.4.2 contain a remote code execution vulnerability in the Business Process Intelligence (BPI) component.
Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Log...
Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properl...
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin.
Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run Check command.
New critical Veeam Backup \& Replication RCE disclosed.
A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access...