Live Cyber Risk Radar

Vulnerability Intelligence & Zero-Days.

Deep-dive vulnerability radar tracking newly disclosed cyber risks, active in-the-wild exploitation (CISA KEV), predictive EPSS scores, and autonomous AI-generated remediation playbooks for SecOps and DevOps teams.

Tracked CVEs
9
Updated continuously
In The Wild (KEV)
9
CISA actively exploited
Critical Severity
6
CVSS Base Score ≥ 9.0
Mean EPSS Exploit
96.0%
Predictive threat score
Daily AI Model
Showing 9 of 9 vulnerabilities
CVE ID & TitleSeverityCVSSEPSSVendor & ProductWeakness (CWE)Threat StatusActions
PHP CGI Argument Injection Remote Code Execution
CRITICAL9.8
100.0%
100th %tile
PHP, Apache Friends (XAMPP), The PHP Group
PHP, XAMPP
CWE-78CWE-178
Wild
Linux Kernel Page-Cache Uninitialized Variable Data Corruption & Root LPE
HIGH8.8
91.2%
99th %tile
Linux, Canonical (Ubuntu), Red Hat, SUSE
Linux Kernel
CWE-456CWE-787
Wild
Broadcom VMware ESXi Insufficient Logging & Hypervisor Audit Bypass
HIGH8.4
88.7%
98th %tile
Broadcom, VMware
VMware ESXi
CWE-778CWE-284
Wild
Windows Remote Desktop Licensing Service (MadLicense) Zero-Click RCE
CRITICAL9.8
97.4%
100th %tile
Microsoft
Windows Server
CWE-120CWE-122
Weaponized
regreSSHion: OpenSSH Pre-Authentication Remote Code Execution
CRITICAL8.1
94.1%
99th %tile
OpenSSH, Ubuntu, Debian, Red Hat, Alpine
OpenSSH
CWE-362CWE-479
PoC
XZ Utils / liblzma Malicious Code Supply Chain Backdoor
CRITICAL10.0
98.5%
100th %tile
Tukaani Project, Debian, Fedora, openSUSE, Arch Linux, Kali Linux
XZ Utils / liblzma
CWE-506CWE-829
Weaponized
Microsoft Outlook Moniker Link Remote Code Execution (#MonikerLink)
CRITICAL9.8
96.2%
99th %tile
Microsoft
Microsoft 365 Apps for Enterprise, Microsoft Office 2016 / 2019 / LTSC 2021
CWE-94CWE-200
Wild
Ivanti Connect Secure & Policy Secure Command Injection Vulnerability
CRITICAL9.1
100.0%
100th %tile
Ivanti
Connect Secure (ICS)
CWE-77
Wild
HTTP/2 Rapid Reset Distributed Denial of Service (DDoS)
HIGH7.5
98.2%
100th %tile
Internet Engineering Task Force (IETF), Cloudflare, Google, AWS, NGINX, Apache, Envoy
HTTP/2 Web Servers and Reverse Proxies
CWE-400
Wild