New that day
- highpatchedexploited Craft CMS Code Injection Vulnerability Craft CMS Craft CMS Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary code. Added to CISA KEV on 2026-03-20 (federal deadline 2026-04-03).
- highpatchedexploited Laravel Livewire Code Injection Vulnerability Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in specific scenarios. Added to CISA KEV on 2026-03-20 (federal deadline 2026-04-03).
- highpatchedexploited Apple Multiple Products Improper Locking Vulnerability Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes. Can be chained with CVE-2025-43520, CVE-2025-31277. Added to CISA KEV on 2026-03-20 (federal deadline 2026-04-03).