Week of August 18, 2026
This is an archived issue. See the latest digest or all issues.
Exploitation probability spikes overnight. Public exploits land. CVEs cross into confirmed in-the-wild use. That movement, the change, is what ESIP scores and surfaces.
Silence is not clearance: a CVE that didn't move isn't a safe one, just one nothing has happened to that week. When something does move, that change is the exposure signal.
Government-confirmed exploitation of a Cisco ASA remote-access VPN flaw, corroborated by ENISA EUVD. Confirmed at critical severity. Act now, don’t wait for more evidence.
A use-after-free in the Windows WinSock driver, now government-confirmed as exploited and corroborated by ENISA EUVD. Confirmed at critical severity. Act now.
Unauthenticated SQL injection in Metabase, confirmed exploited with a public PoC and evidence piling up fast. High velocity. Treat as immediate.
Unauthenticated code-injection RCE in Orkes Conductor, now with a public exploit. Active and escalating. Review against your asset inventory.
Remote code execution in PraisonAI’s CodeAgent, now weaponized on ExploitDB. Active and escalating. Review against your inventory.
A server-side request forgery in the Planyo WordPress plugin, now weaponized on ExploitDB. Active and escalating. Review against your inventory.
Browse every issue, or read the latest.