Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Versa Concerto Auth Bypass is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Emerging exploitation risk
Lfprojects Mlflow: EPSS 22% → 33% · rising (+11%) — EPSS is climbing faster than peer CVEs in this window, a leading indicator even before KEV or public exploit linkage.
Critical exposure
New critical Microsoft Azure Front Door privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion
Prettier eslint-config-prettier Embedded Malicious Code
Versa Concerto Improper Authentication
Vite Vitejs Improper Access Control
Nothing flagged in this category for this digest.
Lfprojects Mlflow XSS
Amplusnet Invisible Browsing Buffer Overflow
This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechanisms, allowing unauthorized users to est...
An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10.
An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2...
Gitea does not properly validate project ownership in organization project operations.
Gitea does not properly validate repository ownership when deleting Git LFS locks.
Gitea does not properly validate repository ownership when linking attachments to releases.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker...
Azure Entra ID Elevation of Privilege Vulnerability
Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.