Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
CWP Control Web Panel RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties
CWP Control Web Panel OS Command Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The Survision LPR Camera system does not enforce password protection by default.
The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the suc_subm...
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) plugin for WordPres...
The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type va...
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defi...
An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400.
Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file.
Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication.
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests.