Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
LiteSpeed CPanel Plugin Privilege Escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Active exploit activity
Apache Http Server RCE now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
LiteSpeed cPanel Plugin Privilege Escalation
Grav is a file-based Web platform.
Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.
The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0.
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function
Nothing flagged in this category for this digest.
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property fil...
Lumiverse is a full-featured AI chat application.
Lumiverse is a full-featured AI chat application.
Lumiverse is a full-featured AI chat application.
Lumiverse is a full-featured AI chat application.
GitLab MCP Server lets an AI agent talk directly to GitLab.
FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dy...
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to...
Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary command...