Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69320

Tracked CVEs

6431

Critical

702

Exploited in wild

4534

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1587
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

22 matches

CVE-2026-109375Medium· 6.1

2w ago

Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs

Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs. Attackers controlling sandbox co…

▾ SunlitVercel · deepsecEPSS 0.32%via NVD

CVE-2026-94544Medium· 4.2⚖ disputed

3w ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular req…

▾ Sunlitvercel · next.jsEPSS 0.18%via NVD

CVE-2026-94543Medium· 5.3

3w ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a res…

▾ Sunlitvercel · next.jsEPSS 0.51%via NVD

CVE-2026-94486Medium· 5.4⚖ disputed

3w ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious webs…

▾ Sunlitvercel · next.jsEPSS 0.11%via NVD

CVE-2026-94485Medium· 5.3⚖ disputed

3w ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious we…

▾ Sunlitvercel · next.jsEPSS 0.17%via NVD

CVE-2026-94484Medium· 4.8

3w ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a share…

▾ Sunlitvercel · next.jsEPSS 0.24%via NVD

CVE-2026-94483Medium· 6.5⚖ disputed

3w ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized…

▾ Sunlitvercel · next.jsEPSS 0.33%via NVD

CVE-2026-103004Medium· 5.3⚖ disputed

4w ago

Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params

Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params. With Cache Components enabled (cacheComponents: true), a 'use cache' function …

▾ Sunlitvercel · next.jsEPSS 0.25%via NVD

CVE-2026-94545Medium· 5.3PoC

4w ago

Satori is a library to convert HTML and CSS to SVG

Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be…

▾ Twilightvercel · satoriEPSS 1.1%via NVD

CVE-2026-8768High· 7.3

5mo ago

A vulnerability was found in vercel ai up to 3.0.97

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-si…

▾ Twilightvercel · aiEPSS 0.46%via NVD

CVE-2026-8767Medium· 5.0

5mo ago

A vulnerability has been found in vercel ai up to 3.0.97

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection.…

▾ Sunlitvercel · aiEPSS 7.0%via NVD

CVE-2026-8769Medium· 4.3

5mo ago

A vulnerability was determined in vercel ai up to 3.0.97

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider…

▾ Sunlitvercel · aiEPSS 0.56%via NVD

CVE-2026-45109High· 7.5

5mo ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fix…

▾ Twilightvercel · next.jsEPSS 0.60%via NVD

CVE-2026-44579High· 7.5PoC

5mo ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through cr…

▾ Midnightvercel · next.jsEPSS 0.75%via NVD

CVE-2026-44578High· 8.6PoC

5mo ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted…

▾ Midnightvercel · next.jsEPSS 36%via NVD

CVE-2026-44577Medium· 5.9

5mo ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memor…

▾ Sunlitvercel · next.jsEPSS 0.74%via NVD

CVE-2026-44575High· 7.5

5mo ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access throug…

▾ Twilightvercel · next.jsEPSS 1.6%via NVD

CVE-2026-44574High· 8.1

5mo ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to authorization bypass. In affected deploy…

▾ Twilightvercel · next.jsEPSS 0.64%via NVD

CVE-2026-44573High· 7.5

5mo ago

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized acc…

▾ Twilightvercel · next.jsEPSS 0.80%via NVD

CVE-2025-55183Medium· 5.3PoC

10mo ago

An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom…

An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom…

▾ Twilightvercel · next.jsEPSS 64%via NVD

CVE-2025-48985Low· 3.7

11mo ago

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More detail…

▾ Sunlitvercel · aiEPSS 0.28%via NVD

CVE-2017-20162Medium· 4.3

3y ago

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complex…

▾ Sunlitvercel · msEPSS 1.0%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params

Satori is a library to convert HTML and CSS to SVG

A vulnerability was found in vercel ai up to 3.0.97

A vulnerability has been found in vercel ai up to 3.0.97

A vulnerability was determined in vercel ai up to 3.0.97

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom…

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params

Satori is a library to convert HTML and CSS to SVG

A vulnerability was found in vercel ai up to 3.0.97

A vulnerability has been found in vercel ai up to 3.0.97

A vulnerability was determined in vercel ai up to 3.0.97

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

Next.js is a React framework for building full-stack web applications

An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom…

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial