Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Sierra Wireless AirLink ALEOS RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Shaneisrael Fireshare Path Traversal (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Google Chromium Out of Bounds Memory Access
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
PCMan FTP Server 2.0 contains a buffer overflow vulnerability in the 'pwd' command that allows remote attackers to execute arbitrary code.
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists.
Insufficiently Protected Credentials vulnerability in Apache Fineract.
Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full a...
Plesk 18.0 has Incorrect Access Control.
Fireshare facilitates self-hosted media and link sharing.