feed: livevuln intel, fast.

$ briefings

Briefings

Periodic SITREPs that compress the week's vulnerability and exploit news into a single readable digest, sourced throughout.

20

editions

129

items covered

13

critical flags

~/briefings/2026-08-10 --latest

Latest edition·August 10, 2026

Aug 3–10: Four KEV Additions, Metabase CVSS 10

Four CISA KEV additions this week. Metabase CVSS 10 patched under active exploitation. WordPress triple chain, 10 MCP CVEs, breaches at Levi Strauss and Valve.

KEV0-DAYOT/ICSAI/MCP

Metabase patched its CVSS 10.0 unauthenticated SQL injection zero-day today — active exploitation confirmed since August 8. No CVE assigned yet. Update immediately.
Four KEV additions this week: CVE-2026-18577 (N-able N-central, Aug 3), CVE-2026-34486 (Apache Tomcat, Aug 4), CVE-2026-9198 (Langflow, CVSS 9.8 unauth RCE), CVE-2026-8037 (Kemp LoadMaster, 792 attempts).
WordPress triple chain CVE-2026-18468/18469/18470 enables unauthenticated admin takeover in Login & Register Forms plugin before 4.0.2. Update now.
Ten MCP server CVEs hit NVD on August 9 — all SSRF or path traversal, ten distinct open-source implementations, most maintainers silent.

Read full briefing →

$ archive

July 2026

Jul 30July 29: VMware trio, Cisco FMC KEV, Minnesota water attack

7 items Jul 29July 28 evening: Check Point MDS scope, vBulletin

3 items Jul 29July 28: TeamCity RCE, OpenWrt critical, AI sandbox escape

6 items Jul 28July 27 evening: Certighost PoC, KEV adds, Fairlife

5 items Jul 27July 27 desk: TELESHIM Telegram C2, supply chain cooldown

4 items Jul 26July 25 desk: Fastjson CVE-2026-16723, GitLab RCE PoC

7 items Jul 25Week in Review: AI Ops, Certighost, M365 Failure

9 items Jul 25July 23-24 desk: AI agents weaponized, Clop active

12 items Jul 23July 21-22 desk: Three KEVs, SharePoint stripped

11 items Jul 19Week in Review: KEV, Certificates, and the Old Debt

5 items Jul 19Weekend desk: wp2shell in the open, 27 DigiCert EV certs

8 items Jul 17Desk briefing: KEV +3 in 24 hours, Fairlife goes dark

8 items Jul 15Desk briefing: KEV grew by four, SonicWall deadline is Friday

7 items Jul 14Desk briefing: Gatekeeper cleared it, and that is the story

5 items Jul 13Desk briefing: the fire drill this week is on the routers

5 items Jul 11Week in Review: AI Attacks Stopped Being Theoretical

5 items Jul 6Desk Briefing: the install-time gate is not the gate you think it is

5 items Jul 4Week in Review: DPRK Broke Supply Chains, an LLM Ran Ransomware

June 2026

Jun 29Week in Review: Five Zero-Days, One Pattern — Edge Devices Are the Front Line

Archive begins June 29, 2026.