Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Emerging exploitation risk
Qt-cute Quickteam: EPSS 32% → 85% · rising (+54%) — EPSS is climbing faster than peer CVEs in this window, a leading indicator even before KEV or public exploit linkage.
Emerging exploitation risk
Sap Business Objects: EPSS 18% → 32% · rising (+14%) — EPSS is climbing faster than peer CVEs in this window, a leading indicator even before KEV or public exploit linkage.
Critical exposure
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Qt-cute Quickteam
Sap Business Objects Buffer Overflow
Sorinara Soritong Mp3 Player Buffer Overflow
Poppler DoS
Shemes Grabit Buffer Overflow
Cyberark Enterprise Password Vault XXE
Sorinara Streaming Audio Player Buffer Overflow
wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client to send a bogus sign...
The AS Password Field In Default Registration Form plugin for WordPress is vulnerable to privilege escalation via account takeover in all...
The FS Registration Password plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and i...
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issu...
Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Newsy newsy allows Upload a Web Shell to a Web Server.Th...
Missing Authorization vulnerability in Sfwebservice InWave Jobs iwjob allows Exploiting Incorrectly Configured Access Control Security Le...
An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vu...
Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy request...
An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1.
iccDEV provides a set of libraries and tools for working with ICC color management profiles.