Week of July 14, 2026
This is an archived issue. See the latest digest or all issues.
Exploitation probability spikes overnight. Public exploits land. CVEs cross into confirmed in-the-wild use. That movement, the change, is what ESIP scores and surfaces.
Silence is not clearance: a CVE that didn't move isn't a safe one, just one nothing has happened to that week. When something does move, that change is the exposure signal.
An unauthenticated file upload in a widely deployed Joomla builder, now government-confirmed as exploited. This is the combination that says patch now, not wait for more evidence.
An authorization bypass in a popular AI-agent builder, now confirmed exploited by ENISA EUVD. Confirmed exploitation at critical severity. Act now.
Evidence is accumulating rapidly. High velocity, last material change five days ago. A confirmed-exploited file upload with a public weapon: treat as immediate.
Active at high severity with a public exploit now available. Escalating, so check it against your asset inventory.
Cookie deserialization to code execution, now with a public exploit. Active and escalating at high severity. Review against your inventory.
Active at high severity with a public exploit now available. Escalating, so check it against your asset inventory.
Browse every issue, or read the latest.