Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69904

Tracked CVEs

6525

Critical

745

Exploited in wild

3427

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1892
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab367
6CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

25 matches

CVE-2026-116878High· 7.5

1w ago

Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers…

▾ TwilightSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116890High· 7.3

1w ago

Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API

Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated attackers to run admin-only maintenance tasks. Attackers can use the public anonymous CSR…

▾ TwilightSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116874Medium· 6.1

1w ago

SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unescaped default parameter in JsonResultPrinter. Attackers can lure vi…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116882Medium· 4.8

1w ago

Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels

Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject HTML through FacetedSearch exploration-link labels. Attackers can store markup …

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116886Medium· 5.4

1w ago

Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse

Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject scripts via External identifier property values. Attackers can annotate markup payloads tha…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116891Medium· 6.1

1w ago

SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate

SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unescaped cstate parameters in Special:FacetedSearch. Attackers can craft URLs wit…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116892Medium· 6.1

1w ago

SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup through the search parameter of the extended Special:Search profile. Attackers can s…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116888Medium· 4.8

1w ago

SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading

SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit right to inject markup through an unescaped property group schema canonical_name. Attackers can save…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116883Medium· 4.8

1w ago

Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to inject HTML through schema descriptions. Attackers with the smw-schemaedit permission can save HT…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116885Medium· 6.1

1w ago

Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116884Medium· 6.1

1w ago

SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes

SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-* attributes via innerHTML with allowHTML enabled. Editors can plant a .smw-highlighter span wit…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116881Medium· 6.1

1w ago

Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject markup by storing malicious semantic property values rendered unescaped in autocomplete suggestions. When another us…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116889Medium· 6.1

1w ago

SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property

SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject script through Code-typed property values. Attackers can annotate a valid JSON value embeddi…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116880High· 7.1

1w ago

Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the wpEditToken with a freshly generated valid token. Attackers can lure an authenticated smw-admin …

▾ TwilightSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116876High· 7.1

1w ago

Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors to permanently protect pages by adding an Is edit protected annotation. When $smwgEditProtectionRight is enabled, Ed…

▾ TwilightSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116887Medium· 5.4

1w ago

Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed property values rendered unescaped on Special:Browse. Attackers …

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116877Medium· 6.5

1w ago

Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass smwgMaxNumRecurringEvents by supplying a large limit parameter. Attackers can save pages u…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116879Medium· 5.4

1w ago

Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates on arbitrary pages. Attackers can supply a serialized subje…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116875Medium· 6.1

1w ago

SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters

SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which outputs separator parameters (sep, propsep, valuesep, delim, separator) without HTML escaping in list, category, DSV,…

▾ SunlitSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116871High· 7.5

1w ago

Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask

Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription() that processes nested query tokens before depth limits apply. Unauthenticated attackers can submit deeply ne…

▾ TwilightSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116872High· 7.5

1w ago

Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters

Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long searc…

▾ TwilightSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-116873High· 7.3

1w ago

Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to run queued jobs and force store updates. Attackers can use the public anonymous …

▾ TwilightSemanticMediaWiki · SemanticMediaWikivia CVEORG

CVE-2026-77610Medium· 6.1

1mo ago

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output (`format=debug`, or the `debug` request parameter on `Special:Ask`)…

▾ SunlitSemanticMediaWiki · SemanticMediaWikiEPSS 0.28%via NVD

CVE-2026-77607Medium· 6.1

1mo ago

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `sep` was inserted verbatim into HTML cell joins. This made it possible to inject HTML…

▾ SunlitSemanticMediaWiki · SemanticMediaWikiEPSS 0.28%via NVD

CVE-2026-77608Medium· 6.1

1mo ago

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the `value` parameter was reflected back into rendered output and error messaging…

▾ SunlitSemanticMediaWiki · SemanticMediaWikiEPSS 0.28%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity

Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API

SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter

Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels

Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse

SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate

SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile

SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading

Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions

Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter

SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes

Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete

SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property

Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions

Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected

Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property

Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event

Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task

SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters

Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask

Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters

Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity

Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API

SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter

Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels

Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse

SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate

SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile

SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading

Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions

Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter

SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes

Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete

SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property

Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions

Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected

Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property

Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event

Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task

SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters

Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask

Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters

Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial