Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Cisco Secure Firewall Management Center (FMC) Deserialization is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical B3log Siyuan SQL injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Ma...
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP He...
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.
SiYuan is a personal knowledge management system.
Admidio is an open-source user management solution.
Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server.
Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server.
Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import fun...