Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Apple Multiple Products Buffer Overflow is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Apple Multiple Products Improper Locking
Apple Multiple Products Classic Buffer Overflow
Apple Multiple Products Buffer Overflow
Laravel Livewire Code Injection
Craft CMS Code Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd.
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write cras...
OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token...
A missing authentication for critical function vulnerability has been reported to affect QVR Pro.
Service information is not encrypted when transmitted as BACnet packets over the wire, and can be sniffed, intercepted, and modified by a...
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulat...
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulat...
WeGIA is a web manager for charitable institutions.
gRPC-Go is the Go language implementation of gRPC.
The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_proc...