Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68753

Tracked CVEs

6387

Critical

701

Exploited in wild

4937

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1580
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

190 matches

CVE-2026-47486High· 7.8

yesterday

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclos…

▾ TwilightNVIDIA · PhysXvia CVEORG

CVE-2026-65145Critical· 10.0

yesterday

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information…

▾ MidnightNVIDIA · NeMo Agent Toolkitvia CVEORG

CVE-2026-65151High· 8.4

yesterday

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.

▾ TwilightNVIDIA · NeMo Agent Toolkitvia CVEORG

CVE-2026-65119High· 8.4

yesterday

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code exe…

▾ TwilightNVIDIA · TensorRT-LLMvia CVEORG

CVE-2026-65120High· 7.1

yesterday

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

▾ TwilightNVIDIA · TensorRT-LLMvia CVEORG

CVE-2026-24269High· 7.1

yesterday

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

Sound the depths of every vulnerability.

Trending now

Feed

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or P…

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive memb…

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings

NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection

NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting …

NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or P…

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive memb…

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings

NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection

NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting …

NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial