Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Apple Multiple Products RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Microsoft Devices Pricing Program RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Wwbn Avideo SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Apple Multiple products Use-After-Free
Apple iOS and iPadOS Use-After-Free
Apple Multiple Products Integer Overflow or Wraparound
Rockwell Multiple Products Insufficient Protected Credentials
Hikvision Multiple Products Improper Authentication
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Chamilo is a learning management system.
Chamilo is a learning management system.
Microsoft Devices Pricing Program Remote Code Execution Vulnerability
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulat...
OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on the mutable actor.name display name field for all...
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
WWBN AVideo is an open source video platform.
WWBN AVideo is an open source video platform.
Sensitive information disclosure and manipulation due to improper authentication.
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.