Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68497

Tracked CVEs

6361

Critical

699

Exploited in wild

6357

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1274
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

2307 matches

CVE-2026-116497Medium· 5.5

yesterday

Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon

A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon dereferences the resulting NULL pointer and crashes. The request requires no a…

▾ SunlitRed Hat · gssproxyEPSS 0.14%via CVEORG

CVE-2026-92171Medium· 6.5

yesterday

Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store

A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line argumen…

▾ SunlitRed Hat · infinispan-server-corevia CVEORG

CVE-2026-116124High· 7.8

yesterday

libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser (CVE-2026-116124)

A flaw was found in libgsf. A heap-based buffer overflow vulnerability exists in the OLE2 document parser within the ole_info_read_metabat function. A remote attacker could exploit this flaw by enticing a user to open a specially crafted f…

▾ TwilightRed Hat · Red Hat Enterprise Linux 6EPSS 0.43%via CSAF

CVE-2026-116137Low· 3.7

2d ago

adm-zip: adm-zip: File integrity check bypass via duplicate archive entries (CVE-2026-116137)

A flaw was found in adm-zip. A remote attacker can exploit this issue by providing a specially crafted ZIP archive containing duplicate entries with equivalent path names to bypass validation checks. Consequently, an application may inspec…

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.26%via CSAF

CVE-2026-116141Medium· 5.3

2d ago

ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoder (CVE-2026-116141)

A flaw was found in ImageMagick. A remote attacker could cause a Denial of Service (DoS) through excessive resource consumption by submitting a specially crafted Ultra High Dynamic Range (UHDR) image file. Because the UHDR decoder validate…

▾ SunlitRed Hat · Red Hat Enterprise Linux 6EPSS 0.33%via CSAF

CVE-2026-116140Low· 3.3

2d ago

ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing (CVE-2026-116140)

A flaw was found in ImageMagick. An attacker could bypass administrator-defined security policies by convincing the application to process specially crafted input that triggers a delegate invocation. This issue occurs due to incorrect pars…

▾ SunlitRed Hat · Red Hat Enterprise Linux 6EPSS 0.13%via CSAF

CVE-2026-116149High· 7.8

2d ago

ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images (CVE-2026-116149)

A flaw was found in ImageMagick. A stack-based buffer overflow vulnerability exists in the handling of bzip2 compressed images, where stack memory can be overwritten during decoding. By submitting a specially crafted image, an attacker can…

▾ TwilightRed Hat · Red Hat Enterprise Linux 6EPSS 0.35%via CSAF

CVE-2026-116148Low· 3.6

2d ago

ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder (CVE-2026-116148)

A flaw was found in ImageMagick. The Magick Vector Graphics (MVG) encoder does not properly neutralize user-specified drawing options before writing them into generated output. An attacker capable of supplying drawing options can exploit t…

▾ SunlitRed Hat · Red Hat Enterprise Linux 6EPSS 0.14%via CSAF

CVE-2026-116152Medium· 5.3

2d ago

ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder (CVE-2026-116152)

A flaw was found in ImageMagick. An attacker could exploit this issue by providing a specially crafted MAT image file that triggers an error-handling path where allocated memory is not properly released. Over time, repeated processing of t…

▾ SunlitRed Hat · Red Hat Enterprise Linux 6EPSS 0.30%via CSAF

CVE-2026-116153Low· 2.5

2d ago

ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations (CVE-2026-116153)

A flaw was found in ImageMagick. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) or potentially execute arbitrary code on 32-bit systems. By convincing a user or automated service to process a specially craf…

▾ SunlitRed Hat · Red Hat Enterprise Linux 6EPSS 0.12%via CSAF

CVE-2026-116160Low· 3.3

2d ago

ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation (CVE-2026-116160)

A flaw was found in ImageMagick. An attacker can cause a Denial of Service (DoS) by tricking a user into processing a specially crafted image file using the X11 animate feature. Processing the image triggers a heap-based buffer overflow, w…

▾ SunlitRed Hat · Red Hat Enterprise Linux 6EPSS 0.12%via CSAF

CVE-2026-116172Medium· 5.9

2d ago

vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interface (CVE-2026-116172)

A flaw was found in vLLM. Due to improper input validation in the Rust gRPC interface, a remote attacker can bypass configured limits by sending requests with excessively large or wrapped token count values. When processed, these invalid v…

▾ SunlitRed Hat · Red Hat AI Inference ServerEPSS 0.35%via CSAF

CVE-2026-116174Medium· 5.9

2d ago

vllm: vllm: Denial of Service via invalid prompt token IDs in gRPC service (CVE-2026-116174)

A flaw was found in vLLM. A remote attacker can trigger a Denial of Service (DoS) by submitting requests containing out-of-bounds token identifiers to the gRPC service. Because the application fails to validate pre-tokenized input against …

▾ SunlitRed Hat · Red Hat AI Inference ServerEPSS 0.27%via CSAF

CVE-2026-116177High· 7.5

2d ago

vllm: vllm: Denial of Service via unconstrained image decompression (CVE-2026-116177)

A flaw was found in vLLM. This flaw allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by exhausting system memory. The vulnerability occurs because the Nemotron-VL processor modules disable the global maximum ima…

▾ TwilightRed Hat · Red Hat AI Inference ServerEPSS 0.29%via CSAF

CVE-2026-116176High· 8.2

2d ago

vllm: vllm: Information disclosure via SSRF in X-Request-Id header (CVE-2026-116176)

A flaw was found in vLLM. This vulnerability allows a remote attacker to trigger a Server-Side Request Forgery (SSRF) by submitting an HTTP request containing a crafted X-Request-Id header. Because the application extracts network addresse…

▾ TwilightRed Hat · Red Hat AI Inference ServerEPSS 0.32%via CSAF

CVE-2026-116181Medium· 6.5

2d ago

vllm: vllm: Denial of Service via unvalidated stop token identifiers (CVE-2026-116181)

A flaw was found in vllm. An authenticated remote attacker could cause a Denial of Service (DoS) or memory corruption by submitting requests containing invalid stop token identifiers. Because the application does not verify whether provide…

▾ SunlitRed Hat · Red Hat AI Inference ServerEPSS 0.37%via CSAF

CVE-2026-116192Medium· 5.9

2d ago

github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-serve (CVE-2026-116192)

A flaw was found in rclone. This vulnerability allows an unauthenticated remote attacker to cause information disclosure through Server-Side Request Forgery (SSRF). When the rc-serve feature is enabled, an attacker can provide a double-sla…

▾ SunlitRed Hat · Cryostat 4EPSS 0.22%via CSAF

CVE-2026-116190Low· 3.7

2d ago

github.com/rclone/rclone: rclone: Information disclosure via cross-host HTTP redirects (CVE-2026-116190)

A flaw was found in rclone. When interacting with WebDAV storage services, rclone inadvertently forwards user-configured custom credential headers to external destinations across HTTP redirects. A remote attacker who controls or influences…

▾ SunlitRed Hat · Cryostat 4EPSS 0.19%via CSAF

CVE-2026-116196Medium· 5.3

2d ago

github.com/rclone/rclone: rclone: Information disclosure via HTTP redirects in B2 backend (CVE-2026-116196)

A flaw was found in Rclone. This vulnerability allows information disclosure due to improper handling of HTTP redirects within the Backblaze B2 storage backend. When download requests are redirected, the client inadvertently forwards sensi…

▾ SunlitRed Hat · Cryostat 4EPSS 0.06%via CSAF

CVE-2026-116194Medium· 6.8

2d ago

github.com/rclone/rclone: rclone: Sensitive data disclosure via CSRF in pCloud OAuth callback (CVE-2026-116194)

A flaw was found in rclone. A remote attacker could redirect file transfers and expose sensitive data by exploiting a Cross-Site Request Forgery (CSRF) vulnerability in the pCloud storage backend. During authorization, the local authentica…

▾ SunlitRed Hat · Cryostat 4EPSS 0.12%via CSAF

CVE-2026-116189High· 7.5

2d ago

github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass (CVE-2026-116189)

A flaw was found in rclone. A remote attacker with the ability to tamper with the release distribution path can bypass cryptographic signature verification during the self-update process. By prepending an unsigned checksum before the signe…

▾ TwilightRed Hat · Cryostat 4EPSS 0.15%via CSAF

CVE-2026-115877Medium· 5.4

4d ago

twisted: Twisted: HTTP request smuggling via improper header delimiter handling (CVE-2026-115877)

A flaw was found in Twisted. The HTTP server component improperly accepts bare carriage return or line feed characters within header values instead of enforcing strict line endings. A remote attacker can exploit this framing disagreement a…

▾ SunlitRed Hat · Red Hat Ansible Automation Platform 2EPSS 0.26%via CSAF

CVE-2026-106071Low· 3.6PoC

4d ago

nodejs: nodejs: Permission model bypass via wildcard path matching flaw (CVE-2026-106071)

A flaw was found in the Node.js Permission Model. Wildcard --allow-fs-read or --allow-fs-write rules can grant access to paths that do not match the intended wildcard when the requested path is shorter than the wildcard prefix and the radi…

▾ TwilightRed Hat · Red Hat Enterprise Linux 9EPSS 0.19%via CSAF

CVE-2026-106072Medium· 6.7PoC

4d ago

nodejs: nodejs: Authentication bypass via non-canonical IPv4 hostname verification (CVE-2026-106072)

A flaw was found in Node.js TLS hostname verification. When a client connects using a non-canonical IPv4 hostname spelling (for example 0177.0.0.1, 0x7f.0.0.1, 2130706433, or 127.1), tls.checkServerIdentity() may fail to classify the host …

▾ TwilightRed Hat · Red Hat Enterprise Linux 8EPSS 0.55%via CSAF

CVE-2026-106073Low· 3.3PoC

4d ago

nodejs: Node.js: Filesystem read permission bypass via fs.realpathSync() (CVE-2026-106073)

A flaw was found in the Node.js Permission Model. fs.realpathSync() does not perform the filesystem read permission checks required of comparable fs APIs. This is an incomplete fix of CVE-2026-21715, which only covered fs.realpathSync.nati…

▾ TwilightRed Hat · Red Hat Enterprise Linux 8EPSS 0.24%via CSAF

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon

Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store

libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser (CVE-2026-116124)

adm-zip: adm-zip: File integrity check bypass via duplicate archive entries (CVE-2026-116137)

ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoder (CVE-2026-116141)

ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing (CVE-2026-116140)

ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images (CVE-2026-116149)

ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder (CVE-2026-116148)

ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder (CVE-2026-116152)

ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations (CVE-2026-116153)

ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation (CVE-2026-116160)

vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interface (CVE-2026-116172)

vllm: vllm: Denial of Service via invalid prompt token IDs in gRPC service (CVE-2026-116174)

vllm: vllm: Denial of Service via unconstrained image decompression (CVE-2026-116177)

vllm: vllm: Information disclosure via SSRF in X-Request-Id header (CVE-2026-116176)

vllm: vllm: Denial of Service via unvalidated stop token identifiers (CVE-2026-116181)

github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-serve (CVE-2026-116192)

github.com/rclone/rclone: rclone: Information disclosure via cross-host HTTP redirects (CVE-2026-116190)

github.com/rclone/rclone: rclone: Information disclosure via HTTP redirects in B2 backend (CVE-2026-116196)

github.com/rclone/rclone: rclone: Sensitive data disclosure via CSRF in pCloud OAuth callback (CVE-2026-116194)

github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass (CVE-2026-116189)

twisted: Twisted: HTTP request smuggling via improper header delimiter handling (CVE-2026-115877)

nodejs: nodejs: Permission model bypass via wildcard path matching flaw (CVE-2026-106071)

nodejs: nodejs: Authentication bypass via non-canonical IPv4 hostname verification (CVE-2026-106072)

nodejs: Node.js: Filesystem read permission bypass via fs.realpathSync() (CVE-2026-106073)

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon

Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store

libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser (CVE-2026-116124)

adm-zip: adm-zip: File integrity check bypass via duplicate archive entries (CVE-2026-116137)

ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoder (CVE-2026-116141)

ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing (CVE-2026-116140)

ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images (CVE-2026-116149)

ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder (CVE-2026-116148)

ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder (CVE-2026-116152)

ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations (CVE-2026-116153)

ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation (CVE-2026-116160)

vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interface (CVE-2026-116172)

vllm: vllm: Denial of Service via invalid prompt token IDs in gRPC service (CVE-2026-116174)

vllm: vllm: Denial of Service via unconstrained image decompression (CVE-2026-116177)

vllm: vllm: Information disclosure via SSRF in X-Request-Id header (CVE-2026-116176)

vllm: vllm: Denial of Service via unvalidated stop token identifiers (CVE-2026-116181)

github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-serve (CVE-2026-116192)

github.com/rclone/rclone: rclone: Information disclosure via cross-host HTTP redirects (CVE-2026-116190)

github.com/rclone/rclone: rclone: Information disclosure via HTTP redirects in B2 backend (CVE-2026-116196)

github.com/rclone/rclone: rclone: Sensitive data disclosure via CSRF in pCloud OAuth callback (CVE-2026-116194)

github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass (CVE-2026-116189)

twisted: Twisted: HTTP request smuggling via improper header delimiter handling (CVE-2026-115877)

nodejs: nodejs: Permission model bypass via wildcard path matching flaw (CVE-2026-106071)

nodejs: nodejs: Authentication bypass via non-canonical IPv4 hostname verification (CVE-2026-106072)

nodejs: Node.js: Filesystem read permission bypass via fs.realpathSync() (CVE-2026-106073)

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial