Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68744

Tracked CVEs

6384

Critical

701

Exploited in wild

5028

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1580
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

59 matches

CVE-2026-116658Medium· 6.5

yesterday

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

▾ SunlitTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-108305High· 7.8

yesterday

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

▾ TwilightTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-108310Medium· 5.3

yesterday

Tanium addressed a denial of service vulnerability in Tanium Server.

▾ SunlitTanium · Tanium Servervia CVEORG

CVE-2026-108307High· 7.8

yesterday

Tanium addressed a heap-based buffer overflow vulnerability in Index.

▾ TwilightTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-108333Low· 2.5

yesterday

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

▾ SunlitTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-116657Medium· 5.3

yesterday

Tanium addressed a denial of service vulnerability in Enforce.

▾ SunlitTanium · Enforcevia CVEORG

CVE-2026-108330Low· 3.6

yesterday

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

▾ SunlitTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-108326Medium· 6.5

yesterday

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

▾ SunlitTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-116649High· 7.1

yesterday

Tanium addressed an improper output sanitization vulnerability in Enforce.

▾ TwilightTanium · Enforcevia CVEORG

CVE-2026-116647High· 7.1

yesterday

Tanium addressed an improper output sanitization vulnerability in Comply.

▾ TwilightTanium · Complyvia CVEORG

CVE-2026-116660Medium· 4.3

yesterday

Tanium addressed an improper access controls vulnerability in Enforce.

▾ SunlitTanium · Enforcevia CVEORG

CVE-2026-108313Medium· 6.6

yesterday

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

▾ SunlitTanium · Tanium Servervia CVEORG

CVE-2026-87086High· 7.5

yesterday

Tanium addressed a denial of service vulnerability in Provision.

▾ TwilightTanium · Provisionvia CVEORG

CVE-2026-108329High· 8.8

yesterday

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

▾ TwilightTanium · Threat Responsevia CVEORG

CVE-2026-108309Medium· 5.5

yesterday

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

▾ SunlitTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-108304High· 7.8

yesterday

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

▾ TwilightTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-108332Medium· 6.3

yesterday

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

▾ SunlitTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-108301Medium· 6.0

yesterday

Tanium addressed an improper access controls vulnerability in Comply.

▾ SunlitTanium · Complyvia CVEORG

CVE-2026-108306High· 7.8

yesterday

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

▾ TwilightTanium · Endpoint Configuration Toolset Solutionvia CVEORG

CVE-2026-108302Medium· 4.3

yesterday

Tanium addressed an improper access controls vulnerability in Comply.

▾ SunlitTanium · Complyvia CVEORG

CVE-2026-108325Medium· 6.6

yesterday

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

▾ SunlitTanium · Reputationvia CVEORG

From the blog

All posts →

Oct 27, 2026

VulnSea has moved to vulnsea.com (and what changed since September)

The beta is over. VulnSea now runs at vulnsea.com, every old beta link redirects to the same page, and your account, API keys and watchlists came with it. Plus a round of hardening, faster pages, and new request limits agents should know about.

Sep 8, 2026

What's new: open corpus, three new MCP tools, vendor advisories, package pages

A summary of everything that shipped over the last two weeks — the whole corpus is open, agents get change feeds, alias resolution and EPSS movers, and the data now includes CVE.org, vendor CSAF, aggregated exploits and per-source scores.

Jul 1, 2026

Wiring VulnSea into an agent: a hands-on tutorial

A step-by-step guide to plugging VulnSea into automated and agentic workflows — poll the delta, triage without burning tokens, match an SBOM, and let an MCP-native model do the reasoning.

Sound the depths of every vulnerability.

Trending now

Feed

Tanium addressed a denial of service vulnerability in Enforce.

Tanium addressed a SQL injection vulnerability in Provision.

Tanium addressed a SQL injection vulnerability in Patch.

Tanium addressed a compression bomb vulnerability in Enforce.

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed a denial of service vulnerability in Tanium Server.

Tanium addressed a heap-based buffer overflow vulnerability in Index.

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Tanium addressed a denial of service vulnerability in Enforce.

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Tanium addressed an improper output sanitization vulnerability in Enforce.

Tanium addressed an improper output sanitization vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Enforce.

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

Tanium addressed a denial of service vulnerability in Provision.

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Tanium addressed a denial of service vulnerability in Enforce.

Tanium addressed a SQL injection vulnerability in Provision.

Tanium addressed a SQL injection vulnerability in Patch.

Tanium addressed a compression bomb vulnerability in Enforce.

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed a denial of service vulnerability in Tanium Server.

Tanium addressed a heap-based buffer overflow vulnerability in Index.

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Tanium addressed a denial of service vulnerability in Enforce.

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Tanium addressed an improper output sanitization vulnerability in Enforce.

Tanium addressed an improper output sanitization vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Enforce.

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

Tanium addressed a denial of service vulnerability in Provision.

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial