Cyble Reports 1,128 Vulnerabilities Found This Week

Cyble’s weekly vulnerability intelligence bulletin reports tracking 1,128 vulnerabilities (over 138 with public PoCs), including dozens rated critical under CVSSv3.1 and CVSSv4.0. The report highlights high-profile flaws (e.g., Tomcat escape-sequence issue, WSUS RCE added to CISA KEV, Adobe Commerce “SessionReaper,” Azure SSRF, ASP.NET Kestrel request smuggling) and ICS vulnerabilities affecting devices from ASKI Energy, Veeder-Root, and Schneider Electric. It also notes dark-web discussions and observed attack attempts, and recommends risk-based vulnerability management, asset segmentation, zero-trust, hardened configurations, and monitored incident response readiness.