Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69379

Tracked CVEs

6435

Critical

703

Exploited in wild

4130

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package1592
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

537 matches

CVE-2026-20179Medium· 5.8

1w ago

Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting …

▾ SunlitCisco · Cisco Open Source Snort3EPSS 0.50%via CVEORG

CVE-2026-20011Medium· 5.8

1w ago

Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of err…

▾ SunlitCisco · Cisco Open Source Snort3EPSS 0.53%via CVEORG

CVE-2026-20291High· 7.8

1w ago

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software harde…

▾ TwilightCisco · Cisco Cyber VisionEPSS 0.16%via CVEORG

CVE-2026-20043Critical· 9.0

1w ago

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

▾ MidnightCisco · Cisco Cyber VisionEPSS 0.36%via CVEORG

CVE-2026-20019Medium· 5.8

1w ago

Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet…

▾ SunlitCisco · Cisco Open Source Snort3EPSS 0.53%via CVEORG

CVE-2026-20356High· 7.5

1w ago

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

▾ TwilightCisco · Cisco Cyber VisionEPSS 0.44%via CVEORG

CVE-2026-76462Medium· 5.5

1w ago

Cisco Secure Client Privilege Escalation Vulnerability

A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability …

▾ SunlitCisco · Cisco Secure ClientEPSS 0.14%via CVEORG

CVE-2026-20218Medium· 5.8

1w ago

Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting i…

▾ SunlitCisco · Cisco Open Source Snort3EPSS 0.63%via CVEORG

CVE-2026-20197Medium· 5.8

1w ago

Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet …

▾ SunlitCisco · Cisco Open Source Snort3EPSS 0.50%via CVEORG

CVE-2026-20236High· 7.5

1w ago

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

▾ TwilightCisco · Cisco Cyber VisionEPSS 0.44%via CVEORG

CVE-2026-20221Medium· 5.8

1w ago

Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected r…

▾ SunlitCisco · Cisco Cyber VisionEPSS 0.58%via CVEORG

CVE-2026-76466Critical· 9.8PoC

1w ago

Cisco Expressway Series Remote Code Execution Vulnerability

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. T…

▾ AbyssalCisco · Cisco TelePresence Video Communication Server (VCS) ExpresswayEPSS 0.42%via CVEORG

CVE-2026-76445Medium· 5.3

1w ago

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) co…

▾ SunlitCisco · Cisco Open Source Snort3EPSS 0.53%via CVEORG

CVE-2026-76435Medium· 5.3

1w ago

Cisco Expressway Series Information Disclosure Vulnerability

A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during…

▾ SunlitCisco · Cisco TelePresence Video Communication Server (VCS) ExpresswayEPSS 0.43%via CVEORG

CVE-2026-76477High· 8.8

1w ago

Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Comm…

▾ TwilightCisco · Cisco Emergency ResponderEPSS 0.46%via CVEORG

CVE-2026-76474Critical· 9.8

1w ago

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities

▾ MidnightCisco · Cisco Emergency ResponderEPSS 0.47%via CVEORG

CVE-2026-76473Critical· 9.8

1w ago

Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.

▾ MidnightCisco · Cisco Emergency ResponderEPSS 0.49%via CVEORG

CVE-2026-76476High· 8.8

1w ago

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

▾ TwilightCisco · Cisco Emergency ResponderEPSS 0.43%via CVEORG

CVE-2026-76475Critical· 9.3

1w ago

Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities

▾ MidnightCisco · Cisco Emergency ResponderEPSS 0.33%via CVEORG

CVE-2026-76487Medium· 5.3

1w ago

Cisco Unified Communications Manager Improper Access Control Vulnerability

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass at…

▾ SunlitCisco · Cisco Unified Communications ManagerEPSS 0.61%via CVEORG

CVE-2026-76478High· 8.8

1w ago

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities

▾ TwilightCisco · Cisco Emergency ResponderEPSS 0.15%via CVEORG

CVE-2026-76481High· 7.5

1w ago

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities

▾ TwilightCisco · Cisco Emergency ResponderEPSS 0.46%via CVEORG

CVE-2026-76479High· 7.8

1w ago

Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities

▾ TwilightCisco · Cisco Emergency ResponderEPSS 0.19%via CVEORG

CVE-2026-76492High· 7.5

1w ago

Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening rel…

▾ TwilightCisco · Cisco TelePresence Video Communication Server (VCS) ExpresswayEPSS 0.36%via CVEORG

CVE-2026-76491High· 7.5

1w ago

Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities

▾ TwilightCisco · Cisco TelePresence Video Communication Server (VCS) ExpresswayEPSS 0.36%via CVEORG

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Cisco Secure Client Privilege Escalation Vulnerability

Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

Cisco Expressway Series Remote Code Execution Vulnerability

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Cisco Expressway Series Information Disclosure Vulnerability

Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities

Cisco Unified Communications Manager Improper Access Control Vulnerability

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities

Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities

Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Cisco Secure Client Privilege Escalation Vulnerability

Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

Cisco Expressway Series Remote Code Execution Vulnerability

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Cisco Expressway Series Information Disclosure Vulnerability

Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities

Cisco Unified Communications Manager Improper Access Control Vulnerability

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities

Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities

Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities

Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial