Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69139

Tracked CVEs

6409

Critical

701

Exploited in wild

4695

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1587
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

10 matches

CVE-2026-102621Low· 3.3

4w ago

A vulnerability was identified in Freedesktop Poppler up to 26.08.0

A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a l…

▾ SunlitFreedesktop · PopplerEPSS 0.11%via NVD

CVE-2026-102620Low· 3.3

4w ago

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed …

▾ SunlitFreedesktop · PopplerEPSS 0.11%via NVD

CVE-2026-93313Medium· 6.3PoC

1mo ago

A vulnerability was found in Freedesktop Poppler 26.07.0

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be ini…

▾ TwilightFreedesktop · PopplerEPSS 0.24%via NVD

CVE-2026-93314Medium· 6.3PoC

1mo ago

A vulnerability was determined in Freedesktop Poppler 26.07.0

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attac…

▾ TwilightFreedesktop · PopplerEPSS 0.24%via NVD

CVE-2026-93312Medium· 4.3PoC

1mo ago

A flaw has been found in Freedesktop Poppler 26.07.0

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The…

▾ TwilightFreedesktop · PopplerEPSS 0.40%via NVD

CVE-2026-93311Medium· 4.3PoC⚖ disputed

1mo ago

A vulnerability was detected in Freedesktop Poppler 26.07.0

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSampl…

▾ TwilightFreedesktop · PopplerEPSS 0.56%via NVD

CVE-2026-4897Medium· 5.5

7mo ago

A flaw was found in polkit

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory…

▾ Sunlitfreedesktop · polkitEPSS 0.16%via NVD

CVE-2023-34969Medium· 6.5

3y ago

D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon

D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivile…

▾ Sunlitfreedesktop · dbusEPSS 1.5%via NVD

CVE-2019-20367Critical· 9.1

6y ago