Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69379

Tracked CVEs

6434

Critical

703

Exploited in wild

4148

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package1592
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

9 matches

CVE-2026-115481High· 8.5

6d ago

baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload

baserCMS is a website development framework. Starting in version 5.0.0-beta1 and prior to versions 5.3.2 and 5.4.2, `PermissionGroupsService::build()` reads a plugin's `config/permission.php` to decide what each user group may reach. Whe…

▾ Twilightbaserproject · basercmsEPSS 0.34%via CVEORG

CVE-2026-115480Medium· 5.3

6d ago

baserCMS: Public Web API mail-form submission bypasses image CAPTCHA

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /baser/api/bc-mail/mail_messages/add/{mailContentId}.json endpoint accepts submissions without enforcing the form's auth_…

▾ Sunlitbaserproject · basercmsEPSS 0.32%via CVEORG

CVE-2026-115479Medium· 5.3

6d ago

baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients

baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visitor can supply a comma-separated address list in a public mail form's email field and cause a single auto-reply to…

▾ Sunlitbaserproject · basercmsEPSS 0.30%via CVEORG

CVE-2026-114621High· 8.8

6d ago

baserCMS: SQL injection in the admin panel and admin API

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder,…

▾ Twilightbaserproject · basercmsEPSS 0.35%via CVEORG

CVE-2026-114624High· 7.2

6d ago

baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area entity serializes widgets only when the submitted value is an array, allowing a string submitted through the admin JSON A…

▾ Twilightbaserproject · basercmsEPSS 0.61%via CVEORG

CVE-2026-114623Medium· 6.5

6d ago

baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plug…

▾ Sunlitbaserproject · basercmsEPSS 0.65%via CVEORG

CVE-2026-114622High· 7.2

6d ago

baserCMS: Encoded path traversal bypass in the theme file API

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update() and getFullpath(), but ThemeFileForm::_ex…

▾ Twilightbaserproject · basercmsEPSS 0.49%via CVEORG

CVE-2026-115457High· 7.1

6d ago

baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, global shortcode expansion runs over the complete rendered page, including HTML-escaped blog comments supplied by unauthenticated visitor…

▾ Twilightbaserproject · basercmsEPSS 0.29%via CVEORG

CVE-2026-76635High· 7.2PoC

2mo ago

baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php

baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled table names and configuration values directly into SQL statements across sequenc…

▾ Midnightbaserproject · basercmsEPSS 0.44%via CVEORG

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload

baserCMS: Public Web API mail-form submission bypasses image CAPTCHA

baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients

baserCMS: SQL injection in the admin panel and admin API

baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity

baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure

baserCMS: Encoded path traversal bypass in the theme file API

baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments

baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload

baserCMS: Public Web API mail-form submission bypasses image CAPTCHA

baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients

baserCMS: SQL injection in the admin panel and admin API

baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity

baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure

baserCMS: Encoded path traversal bypass in the theme file API

baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments

baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial