Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68744

Tracked CVEs

6384

Critical

701

Exploited in wild

5031

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1280
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

23 matches

CVE-2026-112953Medium· 6.0PoC

1w ago

ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

▾ Twilightapostrophecms · @apostrophecms/import-exportEPSS 0.56%via GHSA

CVE-2026-112956Medium· 6.5

1w ago

ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content

▾ Sunlitapostrophecms · @apostrophecms/import-exportEPSS 0.34%via GHSA

CVE-2026-113664Medium· 5.3PoC

1w ago

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry whose normalized destination targets a directory while bypassing the literal …

▾ Twilightapostrophecms · apostropheEPSS 0.48%via CVEORG

CVE-2026-113662Medium· 5.4

1w ago

ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated user with import access to a target type can supply an object or operator as an update-key value, causing the…

▾ Sunlitapostrophecms · apostropheEPSS 0.30%via CVEORG

CVE-2026-113661Medium· 5.4

1w ago

ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-default configuration that allows meta refresh elements and thei…

▾ Sunlitapostrophecms · apostropheEPSS 0.26%via CVEORG

CVE-2026-113668Medium· 5.3

1w ago

ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route GET /api/v1/<piece-type>/:_id/locales (and the equivalent page route) does not apply the publicApiCheckAsync gate that ApostropheCMS's oth…

▾ Sunlitapostrophecms · apostropheEPSS 0.32%via CVEORG

CVE-2026-113710Medium· 5.9

1w ago

ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change endpoint verifies the current password but does not use the login module’s failed-attempt counter, throttle, delay, or l…

▾ Sunlitapostrophecms · apostropheEPSS 0.33%via CVEORG

CVE-2026-113666High· 7.1PoC

1w ago

ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

▾ Midnightapostrophecms · @apostrophecms/db-connectEPSS 0.44%via GHSA

CVE-2026-113669Medium· 5.3PoC

1w ago

ApostropheCMS: Cross-domain session token in URL confers session takeover

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of passport-bridge, cross-host or cross-locale session migration places a single-use bearer session token in a redirect URL. A …

▾ Twilightapostrophecms · apostropheEPSS 0.42%via CVEORG

CVE-2026-113667Medium· 5.3

1w ago

ApostropheCMS: CAPTCHA response token not URL-encoded

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of login-hcaptcha, these three CAPTCHA integrations interpolate an unencoded user-supplied response…

▾ Sunlitapostrophecms · apostropheEPSS 0.37%via CVEORG

CVE-2026-113671Medium· 4.3PoC

1w ago

ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a base64-generated image record without a stored provider U…

▾ Twilightapostrophecms · apostropheEPSS 0.33%via CVEORG

CVE-2026-113670Medium· 5.3

1w ago

ApostropheCMS: Page REST API authorization bypass

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page REST API reads full page documents with .permission(false) in getOne and in the all=1 tree dump, bypassing page-type viewRole, visibility: …

▾ Sunlitapostrophecms · apostropheEPSS 0.33%via CVEORG

CVE-2026-113648Low· 3.1

1w ago

ApostropheCMS: Missing Authentication in `cleanExport` Route

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST /api/v1/@apostrophecms/import-export/clean-export in @apostrophecms/import-export lacks authentication a…

▾ Sunlitapostrophecms · apostropheEPSS 0.33%via CVEORG

CVE-2026-113652Medium· 5.6

1w ago

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sa…

▾ Sunlitapostrophecms · apostropheEPSS 0.28%via CVEORG

CVE-2026-113649Medium· 6.5

1w ago

ApostropheCMS: Import API bypasses publication roles for protected content

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core ApostropheCMS, an editor who can import an enabled content type but lacks its stronger publication role can …

▾ Sunlitapostrophecms · apostropheEPSS 0.30%via CVEORG

CVE-2026-113656Medium· 5.3

1w ago

ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its form submission route stages unbounded multipart uploads before form validation or authentication and lacks upload si…

▾ Sunlitapostrophecms · apostropheEPSS 0.46%via CVEORG

CVE-2026-113658High· 7.5PoC

1w ago

ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV conversion route writes a multipart upload to the system temporary directory before checking its extension and does not…

▾ Midnightapostrophecms · apostropheEPSS 0.61%via CVEORG

CVE-2026-112954Medium· 5.3PoC

1w ago

ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort orde…

▾ Twilightapostrophecms · apostropheEPSS 0.44%via CVEORG

CVE-2026-112955Medium· 6.5

1w ago

ApostropheCMS: Import archives can exhaust server storage and deny service

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed bytes, entry count, and entry sizes are not bounded before do…

▾ Sunlitapostrophecms · apostropheEPSS 0.53%via CVEORG

CVE-2026-110904Medium· 5.3PoC

1w ago

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.

▾ Twilightapostrophecms · ApostropheCMSEPSS 0.30%via NVD

CVE-2026-63667Medium· 6.5

2mo ago

ApostropheCMS is an open-source Node.js content management system

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled _id, name, and ex…

▾ Sunlitapostrophecms · @apostrophecms/import-exportEPSS 0.46%via NVD

CVE-2026-53608High· 8.7

2mo ago

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag

▾ Twilightapostrophecms · @apostrophecms/seoEPSS 0.26%via GHSA

CVE-2026-44990Critical· 9.3PoC

4mo ago

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` prior to 2.17.4 can turn attacker-contro…

▾ Abyssalapostrophecms · sanitize-htmlEPSS 0.68%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document

ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)

ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing

ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

ApostropheCMS: Cross-domain session token in URL confers session takeover

ApostropheCMS: CAPTCHA response token not URL-encoded

ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

ApostropheCMS: Page REST API authorization bypass

ApostropheCMS: Missing Authentication in `cleanExport` Route

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS: Import API bypasses publication roles for protected content

ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS

ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS: Import archives can exhaust server storage and deny service

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.

ApostropheCMS is an open-source Node.js content management system

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document

ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)

ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing

ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

ApostropheCMS: Cross-domain session token in URL confers session takeover

ApostropheCMS: CAPTCHA response token not URL-encoded

ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

ApostropheCMS: Page REST API authorization bypass

ApostropheCMS: Missing Authentication in `cleanExport` Route

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS: Import API bypasses publication roles for protected content

ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS

ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS: Import archives can exhaust server storage and deny service

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.

ApostropheCMS is an open-source Node.js content management system

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial