Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

76682

Tracked CVEs

7149

Critical

779

Exploited in wild

7099

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1892
4CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab367
5CVE-2026-112816Critical· 10.0Improper certificate validation in the HTTPS listener in LXD367
6CVE-2026-116366Critical· 9.5Unauthenticated RCE vulnerability against ClickHouse Server364
7CVE-2026-97631Critical· 9.5Pre-boot RCE in EDK II PXE driver264
8CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

15 matches

CVE-2026-108060Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ brow…

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108059Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108058Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108053Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108057Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108056Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108052Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108055Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108054Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108051Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108050Medium· 5.1

5d ago

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

▾ SunlitAM System · ALO SuiteEPSS 0.30%via CVEORG

CVE-2026-108049Medium· 5.1

5d ago

Clickjacking vulnerability in the Alosuite web application.

Clickjacking vulnerability in the Alosuite web application. The affected login interface can be embedded in a web page controlled by an attacker because it does not implement adequate user interface protection mechanisms, such as the X-F…

▾ SunlitAM System · ALO SuiteEPSS 0.42%via CVEORG

CVE-2026-108048Medium· 6.9

5d ago

Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality.

Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality. The ‘/Account/resetPwd’ endpoint does not enforce adequate restrictions on the number or frequency of password reset requests sent for a single …

▾ SunlitAM System · ALO SuiteEPSS 0.40%via CVEORG

CVE-2026-108046Medium· 6.9

5d ago

Direct Object Reference (IDOR) vulnerability in Alosuite

Direct Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization checks when processing object identifiers. By modifying the identifier provided to the ‘/Companies/Edit/{id}’ endpoint, an attacker can access inf…

▾ SunlitAM System · ALO SuiteEPSS 0.39%via CVEORG

CVE-2026-108047High· 8.6

5d ago

Inadequate authorization vulnerability in Alosuite’s user invitation functionality

Inadequate authorization vulnerability in Alosuite’s user invitation functionality. The ‘/Requests/userInvitation’ endpoint does not properly validate the assignment of privileges on the server, allowing an attacker to manipulate the inv…

▾ TwilightAM System · ALO SuiteEPSS 0.28%via CVEORG

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Clickjacking vulnerability in the Alosuite web application.

Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality.

Direct Object Reference (IDOR) vulnerability in Alosuite

Inadequate authorization vulnerability in Alosuite’s user invitation functionality

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

Clickjacking vulnerability in the Alosuite web application.

Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality.

Direct Object Reference (IDOR) vulnerability in Alosuite

Inadequate authorization vulnerability in Alosuite’s user invitation functionality

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial