Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical Blusparkglobal Bluvoyix privilege escalation (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The Integration Opvius AI for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.0.
The News and Blog Designer Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1 vi...
A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authenticati...
FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().
The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs.
The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation.
The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs.
The vulnerability exists in BLUVOYIX due to design flaws in the email sending API.
The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs.
Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Mo...