Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
OpenPLC ScadaBR XSS is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
High-risk exposure
New high-severity Ricardoboss Pubnet Privilege Escalation — watch for exploit drops and scanner noise in the first 72 hours after disclosure.
High-risk exposure
New high-severity Cerebrate-project Cerebrate privilege escalation — watch for exploit drops and scanner noise in the first 72 hours after disclosure.
CISA KEV — confirmed in-the-wild exploitation.
OpenPLC ScadaBR Cross-site Scripting
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
PubNet is a self-hosted Dart & Flutter package service.
AIS-catcher is a multi-platform AIS receiver.
OrangeHRM is a comprehensive human resource management (HRM) system.
UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a h...