Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Linuxfoundation Tekton Pipelines Path Traversal (CVSS 9.6) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
High-risk exposure
New critical-severity CVE in today's window — elevated exposure signal, early in the lifecycle.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments.
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement...
Citrix NetScaler Out-of-Bounds Read
Mantis Bug Tracker (MantisBT) is an open source issue tracker.
Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.
Graphiti is a framework that sits on top of models and exposes them via a JSON:API-compliant interface.
Aquasecurity Trivy Embedded Malicious Code
WWBN AVideo is an open source video platform.
The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and includin...
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM.