Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Langflow RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Active exploit activity
Frangoteam Fuxa Path Traversal now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical Ubiquiti UniFi OS Path Traversal (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Trend Micro Apex One (On-Premise) Directory Traversal
Langflow Origin Validation Error
Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation o...
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
Nothing flagged in this category for this digest.
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi...
Ubiquiti UniFi OS Improper Access Control
Ubiquiti UniFi OS Path Traversal
Ubiquiti UniFi OS Improper Input Validation
Deserialization of untrusted data in Apache Fory PyFory.
Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a public-facing database utility) that are c...
Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in imp...
The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpres...
Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when sa...
A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfi...