Week of September 22, 2026
This is an archived issue. See the latest digest or all issues.
Exploitation probability spikes overnight. Public exploits land. CVEs cross into confirmed in-the-wild use. That movement, the change, is what ESIP scores and surfaces.
Silence is not clearance: a CVE that didn't move isn't a safe one, just one nothing has happened to that week. When something does move, that change is the exposure signal.
A permission bypass in cellular modem firmware, now government-confirmed as exploited and corroborated by ENISA EUVD. Confirmed at critical severity. Act now.
A privileged-API flaw in Cisco Identity Services Engine (ISE), now government-confirmed as exploited and corroborated by ENISA EUVD. Confirmed at critical severity. Act now.
A local privilege escalation from insecure default file permissions, now government-confirmed as exploited and corroborated by ENISA EUVD. Confirmed at critical severity. Act now.
The confirmed-exploited SonicWall SMA1000 SSRF, with a public Metasploit module, is still escalating fast. Treat as immediate if you run it.
A path traversal in the C-MOR video surveillance web interface, now weaponized on ExploitDB. Active and escalating. Review against your inventory.
A cross-site scripting flaw in the same C-MOR video surveillance interface, now weaponized on ExploitDB. Active and escalating. Review against your inventory.
A cross-site scripting flaw in CubeCart ecommerce (before 6.7.5), now weaponized on ExploitDB. Active and escalating. Review against your inventory.
Browse every issue, or read the latest.