Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69584

Tracked CVEs

6483

Critical

743

Exploited in wild

3727

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1592
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

39 matches

CVE-2026-89124Medium· 4.3

2w ago

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their in…

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their in…

▾ SunlitSAP_SE · SAP HANA (Display Product Catalog Based on Customs Declaration)EPSS 0.17%via NVD

CVE-2026-89122Medium· 6.1

2w ago

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the tru…

▾ SunlitSAP_SE · SAP NetWeaver Enterprise PortalEPSS 0.15%via NVD

CVE-2026-89121Medium· 4.7

2w ago

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization…

▾ SunlitSAP_SE · SAP S/4HANA (Linear Asset Management RAP Business Object)EPSS 0.09%via NVD

CVE-2026-89120High· 7.1

2w ago

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit t…

▾ TwilightSAP_SE · SAP ABAP PlatformEPSS 0.24%via NVD

CVE-2026-89118Medium· 5.3

2w ago

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Av…

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Av…

▾ SunlitSAP_SE · SAP NetWeaver Enterprise PortalEPSS 0.21%via NVD

CVE-2026-89117Medium· 6.1

2w ago

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leadi…

▾ SunlitSAP_SE · SAP NetWeaver Enterprise PortalEPSS 0.17%via NVD

CVE-2026-89116Medium· 5.9

2w ago

The affected code used child_process.execSync with a shell string for generator installation and uninstallation

The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWiz…

▾ SunlitSAP_SE · SAP yeoman-uiEPSS 0.17%via NVD

CVE-2026-89113High· 8.8

2w ago

SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query

SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject arbitrary SQL …

▾ TwilightSAP_SE · SAP Commerce Cloud (OOTB Code)EPSS 0.45%via NVD

CVE-2026-89112Medium· 6.5

2w ago

The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privilege…

The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privilege…

▾ SunlitSAP_SE · CLA-AssistantEPSS 0.21%via NVD

CVE-2026-89111Critical· 10.0

2w ago

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, caus…

▾ MidnightSAP_SE · SAP CloudEPSS 0.37%via NVD

CVE-2026-89110Critical· 9.9

2w ago

SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality

SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote co…

▾ MidnightSAP_SE · SAP NetWeaver Visual ComposerEPSS 0.40%via NVD

CVE-2026-89108Critical· 9.1

2w ago

SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality

SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to …

▾ MidnightSAP_SE · SAP Manufacturing Integration and Intelligence (Configuration Service)EPSS 0.39%via NVD

CVE-2026-89107Critical· 9.9

2w ago

SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language

SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privi…

▾ MidnightSAP_SE · SAP S/4HANA (Manage Substitution/Validation Rules)EPSS 0.48%via NVD

CVE-2026-89106Medium· 4.4

2w ago

SAP UI5 does not perform sufficient input validation under certain configurations

SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact o…

▾ SunlitSAP_SE · SAPUI5EPSS 0.13%via NVD

CVE-2026-89105Medium· 4.2

2w ago

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to g…

▾ SunlitSAP_SE · SAP/cloud-security-services-integration-libraryEPSS 0.14%via NVD

CVE-2026-76976Medium· 5.4

2w ago

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user. If…

▾ SunlitSAP_SE · SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)EPSS 0.14%via NVD

CVE-2026-76975Medium· 6.1

2w ago

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-co…

▾ SunlitSAP_SE · SAPUI5 (Support Assistant Overlay)EPSS 0.17%via NVD

CVE-2026-76972Medium· 6.5

2w ago

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that dis…

▾ SunlitSAP_SE · SAP Manufacturing Integration and IntelligenceEPSS 0.16%via NVD

CVE-2026-58249High· 7.5PoC

2w ago

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handl…

▾ MidnightSAP_SE · SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)EPSS 0.41%via NVD

CVE-2026-58242Low· 3.5

2w ago

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitat…

▾ SunlitSAP_SE · SAP Cloud ConnectorEPSS 0.16%via NVD

CVE-2026-76974Medium· 5.3

1mo ago

SAP Fiori Launchpad does not sufficiently validate certain user-controlled input

SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, causes the browser to load attacker-controlled conten…

▾ SunlitSAP_SE · SAP Fiori LaunchpadEPSS 0.35%via NVD

CVE-2026-76977Medium· 4.3

1mo ago

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a malicious page to bypass framing restrictions. If an authenticated victim visits the attacker's p…

▾ SunlitSAP_SE · SAPUI5(Frame Options Allowlist)EPSS 0.37%via NVD

CVE-2026-76971Medium· 6.5

1mo ago

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could…

▾ SunlitSAP_SE · SAP Manufacturing Integration and IntelligenceEPSS 0.25%via NVD

CVE-2026-76969Critical· 9.4

1mo ago

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive …

▾ MidnightSAP_SE · SAP Cloud Application Programming Model (CAP)EPSS 0.44%via NVD

CVE-2026-76968Medium· 6.5

1mo ago

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state…

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state…

▾ SunlitSAP_SE · SAP Web Dispatcher, Internet Communication Manager and SAP Content ServerEPSS 0.39%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their in…

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Av…

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter

The affected code used child_process.execSync with a shell string for generator installation and uninstallation

SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query

The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privilege…

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications

SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality

SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality

SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language

SAP UI5 does not perform sufficient input validation under certain configurations

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests

SAP Fiori Launchpad does not sufficiently validate certain user-controlled input

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state…

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their in…

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Av…

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter

The affected code used child_process.execSync with a shell string for generator installation and uninstallation

SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query

The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privilege…

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications

SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality

SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality

SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language

SAP UI5 does not perform sufficient input validation under certain configurations

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests

SAP Fiori Launchpad does not sufficiently validate certain user-controlled input

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state…

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial