Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Marimo RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Microsoft Bing Deserialization (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Microsoft Entra Id SSRF (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Marimo Remote Code Execution
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
privilege escalation
A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without...
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over...
New critical Senselive X3500 Firmware exposure disclosed.
A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper h...
New critical Senselive X3500 Firmware privilege escalation disclosed.
New critical Senselive X3500 Firmware exposure disclosed.
Flowise is a drag & drop user interface to build a customized large language model flow.