Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68648

Tracked CVEs

6371

Critical

699

Exploited in wild

6478

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1274
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

749 matches

CVE-2026-94402Medium· 6.1

1w ago

IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation

IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write w…

▾ SunlitIBM · @carbon/chartsEPSS 0.25%via CVEORG

CVE-2026-93888High· 7.8

1w ago

IBM Sterling Connect:Direct for Unix Buffer Overflow

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.

▾ TwilightIBM · Sterling Connect Direct for UnixEPSS 0.21%via CVEORG

CVE-2026-82891High· 8.1

1w ago

IBM Guardium Data Protection is affected by a security vulnerability

IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.

▾ TwilightIBM · Guardium Data ProtectionEPSS 0.50%via CVEORG

CVE-2026-93744Medium· 6.5

1w ago

IBM i Improper Authentication

IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to a…

▾ SunlitIBM · iEPSS 0.43%via CVEORG

CVE-2026-93442High· 8.2

1w ago

IBM QRadar SIEM Out-of-bounds Read

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.

▾ TwilightIBM · QRadarEPSS 0.41%via CVEORG

CVE-2026-93441High· 8.6

1w ago

IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service

IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

▾ TwilightIBM · QRadar Security Information and Event ManagementEPSS 0.33%via CVEORG

CVE-2026-9825Low· 3.7

1w ago

IBM Cyber Fraud Reachable Assertion

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.

▾ SunlitIBM · CyberFraudEPSS 0.24%via CVEORG

CVE-2026-87800Medium· 6.8

1w ago

IBM Cyber Fraud includes components with multiple known vulnerabilities

IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.

▾ SunlitIBM · Cyber FraudEPSS 0.55%via CVEORG

CVE-2026-92559Critical· 9.8

1w ago

IBM App Connect Enterprise is vulnerable to a credential exposure

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.

▾ MidnightIBM · App Connect EnterpriseEPSS 0.53%via CVEORG

CVE-2026-81212Critical· 10.0

1w ago

DataStage on Cloud Pak for Data Improper Authorization

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller …

▾ MidnightIBM · DataStage on Cloud Pak for DataEPSS 0.27%via CVEORG

CVE-2026-76587High· 8.8

1w ago

IBM Planning Analytics Buffer Overflow

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.

▾ TwilightIBM · Planning AnalyticsEPSS 0.66%via CVEORG

CVE-2026-8355Medium· 5.4

1w ago

IBM ContextForge MCP Gateway is affected by server-side request forgery

IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources…

▾ SunlitIBM · ContextForge MCP GatewayEPSS 0.23%via CVEORG

CVE-2026-109126High· 8.8

1w ago

IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.

▾ TwilightIBM · Verify Identity AccessEPSS 0.23%via CVEORG

CVE-2026-107400High· 8.8

1w ago

Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.

▾ TwilightIBM · TRIRIGA Application PlatformEPSS 0.55%via CVEORG

CVE-2026-107366High· 8.3

1w ago

Langflow OSS Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hija…

▾ TwilightIBM · Langflow OSSEPSS 0.30%via CVEORG

CVE-2026-105453High· 8.4

1w ago

IBM Sterling Connect:Direct for Unix Improper Privilege Management

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

▾ TwilightIBM · Sterling Connect Direct for UnixEPSS 0.13%via CVEORG

CVE-2025-36252Medium· 6.3

1w ago

TS4500 Tape Library Insufficient Session Expiration

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.

▾ SunlitIBM · Storage TS4500 LibraryEPSS 0.20%via CVEORG

CVE-2026-19178Medium· 6.8

1w ago

TS4500 Tape Library Race Condition

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

▾ SunlitIBM · Storage TS4500 LibraryEPSS 0.25%via CVEORG

CVE-2025-36069Medium· 5.5

1w ago

TS4500 Tape Library Insufficient Session Expiration

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

▾ SunlitIBM · Storage TS4500 LibraryEPSS 0.15%via CVEORG

CVE-2025-36061Medium· 6.5

1w ago

TS4500 Tape Library Denial of Service

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume exces…

▾ SunlitIBM · Storage TS4500 LibraryEPSS 0.32%via CVEORG

CVE-2026-3161Medium· 5.9

1w ago

IBM Cloud Pak System Risky Cryptographic Algorithm

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

▾ SunlitIBM · Cloud Pak SystemEPSS 0.17%via CVEORG

CVE-2023-38375Medium· 6.1

1w ago

IBM Cloud Pak System Cross-Site Scripting

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…

▾ SunlitIBM · Cloud Pak SystemEPSS 0.19%via CVEORG

CVE-2026-4418Medium· 5.4

1w ago

IBM Cloud Pak System HTML Injection

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context o…

▾ SunlitIBM · Cloud Pak SystemEPSS 0.17%via CVEORG

CVE-2026-3295High· 7.4

1w ago

IBM Cloud Pak System Cross-Site Scripting

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vul…

▾ TwilightIBM · Cloud Pak SystemEPSS 0.22%via CVEORG

CVE-2026-12670Medium· 5.3

1w ago

IBM MQ Denial of Service

IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.

▾ SunlitIBM · MQ OperatorEPSS 0.21%via CVEORG

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation

IBM Sterling Connect:Direct for Unix Buffer Overflow

IBM Guardium Data Protection is affected by a security vulnerability

IBM i Improper Authentication

IBM QRadar SIEM Out-of-bounds Read

IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service

IBM Cyber Fraud Reachable Assertion

IBM Cyber Fraud includes components with multiple known vulnerabilities

IBM App Connect Enterprise is vulnerable to a credential exposure

DataStage on Cloud Pak for Data Improper Authorization

IBM Planning Analytics Buffer Overflow

IBM ContextForge MCP Gateway is affected by server-side request forgery

IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials

Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication

Langflow OSS Authorization Bypass Through User-Controlled Key

IBM Sterling Connect:Direct for Unix Improper Privilege Management

TS4500 Tape Library Insufficient Session Expiration

TS4500 Tape Library Race Condition

TS4500 Tape Library Insufficient Session Expiration

TS4500 Tape Library Denial of Service

IBM Cloud Pak System Risky Cryptographic Algorithm

IBM Cloud Pak System Cross-Site Scripting

IBM Cloud Pak System HTML Injection

IBM Cloud Pak System Cross-Site Scripting

IBM MQ Denial of Service

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation

IBM Sterling Connect:Direct for Unix Buffer Overflow

IBM Guardium Data Protection is affected by a security vulnerability

IBM i Improper Authentication

IBM QRadar SIEM Out-of-bounds Read

IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service

IBM Cyber Fraud Reachable Assertion

IBM Cyber Fraud includes components with multiple known vulnerabilities

IBM App Connect Enterprise is vulnerable to a credential exposure

DataStage on Cloud Pak for Data Improper Authorization

IBM Planning Analytics Buffer Overflow

IBM ContextForge MCP Gateway is affected by server-side request forgery

IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials

Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication

Langflow OSS Authorization Bypass Through User-Controlled Key

IBM Sterling Connect:Direct for Unix Improper Privilege Management

TS4500 Tape Library Insufficient Session Expiration

TS4500 Tape Library Race Condition

TS4500 Tape Library Insufficient Session Expiration

TS4500 Tape Library Denial of Service

IBM Cloud Pak System Risky Cryptographic Algorithm

IBM Cloud Pak System Cross-Site Scripting

IBM Cloud Pak System HTML Injection

IBM Cloud Pak System Cross-Site Scripting

IBM MQ Denial of Service

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial