Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Fortinet Multiple Products Auth Bypass is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Nyariv Sandboxjs Code Execution (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
A security issue has been identified in ibaPDA that could allow unauthorized actions on the file system under certain conditions.
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-b...
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabi...
Kyverno is a policy engine designed for cloud native platform engineering teams.
SandboxJS is a JavaScript sandboxing library.
Squidex is an open source headless content management system and content management hub.
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine.
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.
Dokploy is a free, self-hostable Platform as a Service (PaaS).