Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Active exploit activity
Meta React Server Components RCE now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Active exploit activity
Romm.app Romm XSS now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical Sonicverse Radio Audio Streaming Stack SSRF (CVSS 9.9) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Meta React Server Components Remote Code Execution
RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface.
Nothing flagged in this category for this digest.
An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary...
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache...
A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated,...
A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an una...
Smart Slider 3 Pro version 3.5.1.35 for WordPress and Joomla contains a multi-stage remote access toolkit injected through a compromised...
PraisonAI is a multi-agent teams system.
Sonicverse is a Self-hosted Docker Compose stack for live radio streaming.
PraisonAIAgents is a multi-agent teams system.
PraisonAI is a multi-agent teams system.
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropri...