Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68673

Tracked CVEs

6383

Critical

701

Exploited in wild

6071

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1280
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

65 matches

CVE-2026-43834High· 7.5

1w ago

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.

▾ TwilightAdvantech · ADAM-3600EPSS 0.37%via CVEORG

CVE-2026-43835High· 8.6

1w ago

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

▾ TwilightAdvantech · ADAM-3600EPSS 0.18%via CVEORG

CVE-2026-43837High· 7.5

1w ago

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

▾ TwilightAdvantech · ADAM-3600EPSS 0.43%via CVEORG

CVE-2026-43836Critical· 9.3

1w ago

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

▾ MidnightAdvantech · ADAM-3600EPSS 0.89%via CVEORG

CVE-2026-43854Medium· 6.3

1w ago

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

▾ SunlitAdvantech · ADAM-3600EPSS 0.10%via CVEORG

CVE-2026-43840Medium· 6.9

1w ago

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

▾ SunlitAdvantech · ADAM-3600EPSS 0.34%via CVEORG

CVE-2026-43838Critical· 9.2

1w ago

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

▾ MidnightAdvantech · ADAM-3600EPSS 0.38%via CVEORG

CVE-2026-43841Medium· 6.9

1w ago

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

▾ SunlitAdvantech · ADAM-3600EPSS 0.34%via CVEORG

CVE-2026-43839High· 8.7

1w ago

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

▾ TwilightAdvantech · ADAM-3600EPSS 0.34%via CVEORG

CVE-2026-43845Critical· 9.2

1w ago

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

▾ MidnightAdvantech · ADAM-3600EPSS 0.45%via CVEORG

CVE-2026-43842Medium· 6.9

1w ago

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

▾ SunlitAdvantech · ADAM-3600EPSS 0.34%via CVEORG

CVE-2026-43846High· 8.6

1w ago

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

▾ TwilightAdvantech · ADAM-3600EPSS 0.46%via CVEORG

CVE-2026-43844Critical· 9.3

1w ago

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

▾ MidnightAdvantech · ADAM-3600EPSS 0.49%via CVEORG

CVE-2026-43843Medium· 6.9

1w ago

An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

▾ SunlitAdvantech · ADAM-3600EPSS 0.34%via CVEORG

CVE-2026-43851High· 8.2

1w ago

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

▾ TwilightAdvantech · ADAM-3600EPSS 0.43%via CVEORG

CVE-2026-43849Medium· 6.9

1w ago

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

▾ SunlitAdvantech · ADAM-3600EPSS 0.40%via CVEORG

CVE-2026-43848Medium· 6.9

1w ago

A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

▾ SunlitAdvantech · ADAM-3600EPSS 0.34%via CVEORG

CVE-2026-43847High· 8.2

1w ago

A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.

▾ TwilightAdvantech · ADAM-3600EPSS 0.30%via CVEORG

CVE-2026-43853High· 8.2

1w ago

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

▾ TwilightAdvantech · ADAM-3600EPSS 0.40%via CVEORG

CVE-2026-43852High· 8.2

1w ago

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

▾ TwilightAdvantech · ADAM-3600EPSS 0.43%via CVEORG

CVE-2026-43850High· 8.6

1w ago

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.

▾ TwilightAdvantech · ADAM-3600EPSS 1.6%via CVEORG

CVE-2026-43856High· 8.6

1w ago

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.

▾ TwilightAdvantech · ADAM-3600EPSS 0.66%via CVEORG

CVE-2026-43857High· 8.6

1w ago

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.

▾ TwilightAdvantech · ADAM-3600EPSS 0.68%via CVEORG

CVE-2026-43855High· 7.5

1w ago

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

▾ TwilightAdvantech · ADAM-3600EPSS 0.48%via CVEORG

CVE-2026-43858High· 8.6

1w ago

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

▾ TwilightAdvantech · ADAM-3600EPSS 0.72%via CVEORG

From the blog

All posts →

Oct 27, 2026

VulnSea has moved to vulnsea.com (and what changed since September)

The beta is over. VulnSea now runs at vulnsea.com, every old beta link redirects to the same page, and your account, API keys and watchlists came with it. Plus a round of hardening, faster pages, and new request limits agents should know about.

Sep 8, 2026

What's new: open corpus, three new MCP tools, vendor advisories, package pages

A summary of everything that shipped over the last two weeks — the whole corpus is open, agents get change feeds, alias resolution and EPSS movers, and the data now includes CVE.org, vendor CSAF, aggregated exploits and per-source scores.

Jul 1, 2026

Wiring VulnSea into an agent: a hands-on tutorial

A step-by-step guide to plugging VulnSea into automated and agentic workflows — poll the delta, triage without burning tokens, match an SBOM, and let an MCP-native model do the reasoning.