Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69379

Tracked CVEs

6435

Critical

703

Exploited in wild

4148

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package1592
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

11 matches

CVE-2026-109157Critical· 9.9PoC

2w ago

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer over…

▾ AbyssalTRENDnet · TEW-432BRPEPSS 0.59%via NVD

CVE-2026-108804Critical· 10.0PoC

2w ago

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service res…

▾ AbyssalTRENDnet · TEW-751DREPSS 2.3%via NVD

CVE-2025-15472High· 7.2

9mo ago

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of the component httpd . This manipulation of the argument DeviceURL causes os command injection. The attack can be init…

▾ Twilighttrendnet · tew-811dru_firmwareEPSS 22%via NVD

CVE-2025-15471Critical· 9.8

9mo ago

A vulnerability was detected in TRENDnet TEW-713RE 1.02

A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file /goformX/formFSrvX. The manipulation of the argument SZCMD results in os command injection. It is possible to launch the att…

▾ Midnighttrendnet · tew-713re_firmwareEPSS 14%via NVD

CVE-2025-15139Medium· 6.3

10mo ago

A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06

A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4 of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection. The attack can be executed re…

▾ Sunlittrendnet · tew-822dre_firmwareEPSS 13%via NVD

CVE-2025-15137High· 8.8

10mo ago

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The…

▾ Twilighttrendnet · tew-800mb_firmwareEPSS 11%via NVD

CVE-2025-15136High· 8.8

10mo ago

A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0

A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0. Affected is the function do_setWizard_asp of the file /goform/wizardset of the component Management Interface. The manipulation of the argument WizardConfigured le…

▾ Twilighttrendnet · tew-800mb_firmwareEPSS 11%via NVD

CVE-2024-46484Critical· 9.8

1y ago

TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.

▾ Midnighttrendnet · tv-ip410_firmwareEPSS 1.1%via NVD

CVE-2022-37053Critical· 9.8

4y ago

TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.

▾ Midnighttrendnet · tew733gr_firmwareEPSS 2.3%via NVD

CVE-2022-35203High· 7.2

4y ago

An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.

▾ Twilighttrendnet · tv-ip572pi_firmwareEPSS 1.2%via NVD

CVE-2021-31655Medium· 6.1

5y ago

Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter

Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter. in a GET request in view.cgi.

▾ Sunlittrendnet · tv-ip110wn_firmwareEPSS 0.75%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0

A vulnerability was detected in TRENDnet TEW-713RE 1.02

A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0

A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0

TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.

TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.

An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.

Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0

A vulnerability was detected in TRENDnet TEW-713RE 1.02

A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0

A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0

TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.

TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.

An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.

Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial