Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68648

Tracked CVEs

6371

Critical

699

Exploited in wild

6478

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1274
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

9 matches

CVE-2026-86019Medium· 5.3

4d ago

Part-DB: Attachment Size Limit Bypass via API Base64 Upload

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the A…

▾ SunlitPart-DB · Part-DB-serverEPSS 0.25%via CVEORG

CVE-2026-86018Medium· 5.3

4d ago

Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum attachment file size when using the server-side “Download exter…

▾ SunlitPart-DB · Part-DB-serverEPSS 0.27%via CVEORG

CVE-2026-59188Medium· 5.4

4d ago

Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files based solely on the user-controlled filename extension rather than actual file content type. An …

▾ SunlitPart-DB · Part-DB-serverEPSS 0.15%via CVEORG

CVE-2026-86055High· 8.7

4d ago

Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to a user from the client-supplied HTTP Host header, with no t…

▾ TwilightPart-DB · Part-DB-serverEPSS 0.40%via CVEORG

CVE-2026-86020Medium· 4.6

4d ago

Part-DB: Spreadsheet Formula Injection in XLSX Part Exports

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB contains a spreadsheet formula injection vulnerability in the part import/export workflow. An authenticated user with permi…

▾ SunlitPart-DB · Part-DB-serverEPSS 0.15%via CVEORG

CVE-2026-54630Critical· 9.6

4d ago

Part-DB: Authenticated RCE via .phar attachment upload served from public/media

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extens…

▾ MidnightPart-DB · Part-DB-serverEPSS 0.23%via CVEORG

CVE-2026-54615Medium· 6.0

4d ago

Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap)

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, LogEntryExtraFormatter builds the HTML shown in the "Extra" column of the activity-log table (/log) and in element history tables. …

▾ SunlitPart-DB · Part-DB-serverEPSS 0.37%via CVEORG

CVE-2026-54631Medium· 6.3

4d ago

Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed value for APP_SECRET (a03498528f5a5fc089273ec9ae5b2849). The off…

▾ SunlitPart-DB · Part-DB-serverEPSS 0.11%via CVEORG

CVE-2026-55600Medium· 5.7

4d ago

Part-DB: Stored HTML injection in BOM validation results via unescaped Part name

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB renders BOM validation information messages using Twig's |raw filter. These messages include translated placeholders popula…

▾ SunlitPart-DB · Part-DB-serverEPSS 0.30%via CVEORG

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Part-DB: Attachment Size Limit Bypass via API Base64 Upload

Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads

Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer

Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover

Part-DB: Spreadsheet Formula Injection in XLSX Part Exports

Part-DB: Authenticated RCE via .phar attachment upload served from public/media

Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap)

Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie

Part-DB: Stored HTML injection in BOM validation results via unescaped Part name

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Part-DB: Attachment Size Limit Bypass via API Base64 Upload

Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads

Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer

Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover

Part-DB: Spreadsheet Formula Injection in XLSX Part Exports

Part-DB: Authenticated RCE via .phar attachment upload served from public/media

Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap)

Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie

Part-DB: Stored HTML injection in BOM validation results via unescaped Part name

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial