Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
JetBrains TeamCity Path Traversal is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Doorman Privilege Escalation (CVSS 9.9) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor
Quest KACE Systems Management Appliance (SMA) Improper Authentication
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting
Kentico Xperience Path Traversal
JetBrains TeamCity Relative Path Traversal
PaperCut NG/MF Improper Authentication
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor int...
NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorre...
Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privil...
Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.
Spinnaker is an open source, multi-cloud continuous delivery platform.
Spinnaker is an open source, multi-cloud continuous delivery platform.
SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username paramet...
OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inherit...
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a forma...
Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement...