Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Daily summary
Ivanti Endpoint Manager Mobile (EPMM) added to CISA KEV — confirmed in-the-wild exploitation.
Applied Watch Technologies Applied Watch Command Center — exploitation likelihood rose sharply (EPSS 4.1% → 20% · rising (+16%)).
7 new critical disclosures — review patch status on exposed services.
Top threats today
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection
Actively exploited (CISA KEV)
CVSS 9.8
Listed on CISA KEV
Remote code execution exposure
Ivanti Endpoint Manager Mobile (EPMM) RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Emerging exploitation risk
CVE-2003-0974Applied Watch Technologies Applied Watch Command Center
Exploitation likelihood sharply increased
EPSS 4.1% → 20% · rising (+16%)
Applied Watch Technologies Applied Watch Command Center: EPSS 4.1% → 20% · rising (+16%) — EPSS is climbing faster than peer CVEs in this window, a leading indicator even before KEV or public exploit linkage.
Critical exposure
CVE-2025-69929N3uron Web User Interface privilege escalation
CVSS 9.8
Potential privilege escalation to admin/root
New critical N3uron Web User Interface privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.