The Week in Vulnerabilities: Time to Exploit Continues to Fall

Cyble’s weekly vulnerability intelligence highlights over 900 disclosed flaws (nearly 200 with public PoCs), with multiple critical issues actively exploited or under active discussion on underground forums — notably a SharePoint zero-day tied to the 'ToolShell' campaign, Fortinet FortiWeb SQLi with public exploits, actively exploited CrushFTP RCE, Citrix NetScaler memory bugs, Chrome sandbox bypass, VMware hypervisor flaws, NVIDIA container escape risk, and several ICS vulnerabilities impacting Siemens, Schneider, KUNBUS, and Leviton. The report urges rapid, risk-based remediation and defensive measures across IT and OT environments.