Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Fortinet FortiWeb Path Traversal is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Desktopalert Pingalert Application Server privilege escalation (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Desktopalert Pingalert Application Server privilege escalation (CVSS 9.6) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Fortinet FortiWeb Path Traversal
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint.
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 expl...
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 expl...
General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to...