Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68750

Tracked CVEs

6385

Critical

701

Exploited in wild

5034

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1580
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

132 matches

CVE-2026-79851Critical· 10.0

6d ago

Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the und…

▾ MidnightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.76%via CVEORG

CVE-2026-79850Critical· 10.0

6d ago

Authentication Bypass Leading to Remote Code Execution in AOS-8

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attack…

▾ MidnightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.69%via CVEORG

CVE-2026-79849Critical· 10.0

6d ago

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary c…

▾ MidnightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.70%via CVEORG

CVE-2026-79848Critical· 10.0

6d ago

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

▾ MidnightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.70%via CVEORG

CVE-2026-79847Critical· 10.0

6d ago

Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results…

▾ MidnightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.82%via CVEORG

CVE-2026-79844Critical· 10.0

6d ago

Authentication Bypass Leading to Remote Code Execution in AOS-10

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met.…

▾ MidnightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.69%via CVEORG

CVE-2026-95721Low· 3.3

6d ago

Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal ope…

▾ SunlitHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.11%via CVEORG

CVE-2026-95720Medium· 4.4

6d ago

Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8

A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from reb…

▾ SunlitHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.15%via CVEORG

CVE-2026-95719Medium· 4.9

6d ago

Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10

An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attack…

▾ SunlitHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.34%via CVEORG

CVE-2026-95718Medium· 5.3

6d ago

Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to make limited unauthori…

▾ SunlitHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.38%via CVEORG

CVE-2026-95717Medium· 5.5

6d ago

Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface

A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow…

▾ SunlitHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.27%via CVEORG

CVE-2026-95715Medium· 6.8

6d ago

Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface

An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying …

▾ SunlitHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 1.6%via CVEORG

CVE-2026-95716Medium· 6.5

6d ago

Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes

An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a v…

▾ SunlitHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.24%via CVEORG

CVE-2026-95714Medium· 6.8

6d ago

Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary c…

▾ SunlitHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.32%via CVEORG

CVE-2026-95712High· 7.1

6d ago

Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol

A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacke…

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.24%via CVEORG

CVE-2026-95711High· 7.1

6d ago

Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface

An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if c…

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.24%via CVEORG

CVE-2026-95713High· 7.0

6d ago

Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface

An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limi…

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.29%via CVEORG

CVE-2026-95710High· 7.1

6d ago

Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8

An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow…

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.23%via CVEORG

CVE-2026-95709High· 7.2

6d ago

Authenticated Command Injection Vulnerabilities in AOS-10

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute a…

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 1.3%via CVEORG

CVE-2026-95706High· 7.2

6d ago

Authenticated Command Injection Vulnerabilities in AOS-8

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with…

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 1.2%via CVEORG

CVE-2026-95708High· 7.2

6d ago

Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 1.3%via CVEORG

CVE-2026-95707High· 7.2

6d ago

Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8

A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code a…

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.71%via CVEORG

CVE-2026-95705High· 7.2

6d ago

Authenticated Command Injection Vulnerabilities in AOS-8

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 1.2%via CVEORG

CVE-2026-95704High· 7.2

6d ago

Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface

A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary comma…

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.66%via CVEORG

CVE-2026-79956High· 7.2

6d ago

Improper Sanitization leads to Command Injection in AOS-8 Web Interface

A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run …

▾ TwilightHewlett Packard Enterprise (HPE) · ArubaOS (AOS)EPSS 0.70%via CVEORG

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

Authentication Bypass Leading to Remote Code Execution in AOS-8

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

Authentication Bypass Leading to Remote Code Execution in AOS-10

Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface

Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8

Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10

Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8

Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface

Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface

Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes

Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol

Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface

Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface

Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8

Authenticated Command Injection Vulnerabilities in AOS-10

Authenticated Command Injection Vulnerabilities in AOS-8

Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10

Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8

Authenticated Command Injection Vulnerabilities in AOS-8

Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface

Improper Sanitization leads to Command Injection in AOS-8 Web Interface

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

Authentication Bypass Leading to Remote Code Execution in AOS-8

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

Authentication Bypass Leading to Remote Code Execution in AOS-10

Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface

Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8

Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10

Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8

Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface

Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface

Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes

Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol

Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface

Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface

Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8

Authenticated Command Injection Vulnerabilities in AOS-10

Authenticated Command Injection Vulnerabilities in AOS-8

Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10

Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8

Authenticated Command Injection Vulnerabilities in AOS-8

Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface

Improper Sanitization leads to Command Injection in AOS-8 Web Interface

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial