Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
GitLab Community And Enterprise Editions SSRF is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Omran Fikir Odalari Adminpando SQL Injection (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
SolarWinds Web Help Desk Deserialization of Untrusted Data
Sangoma FreePBX OS Command Injection
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF)
Sangoma FreePBX Improper Authentication
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
CraftCMS 3 vCard Plugin 1.0.0 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary PHP cod...
Netis E1+ version 1.2.32533 contains a hardcoded root account vulnerability that allows unauthenticated attackers to access the device wi...
A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26.
An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices.
Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control.
MOMA Seismic Station Version v2.4.2520 and prior exposes its web management interface without requiring authentication, which could allow...
The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface without requiring authentication, allowi...
Qwik is a performance focused javascript framework.
PEAR is a framework and distribution system for reusable PHP components.
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme supp...