Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

74940

Tracked CVEs

6998

Critical

765

Exploited in wild

5562

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1892
4CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab367
5CVE-2026-112816Critical· 10.0Improper certificate validation in the HTTPS listener in LXD367
6CVE-2026-116366Critical· 9.5Unauthenticated RCE vulnerability against ClickHouse Server364
7CVE-2026-97631Critical· 9.5Pre-boot RCE in EDK II PXE driver264
8CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

14 matches

CVE-2025-64425High· 8.1

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, an attacker can initiate a password reset for a victim, and modify the host head…

▾ Twilightcoollabs · coolifyEPSS 0.43%via NVD

CVE-2025-64424High· 8.8PoC

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a command injection vulnerability exists in the git source input fields of a res…

▾ Midnightcoollabs · coolifyEPSS 2.1%via NVD

CVE-2025-64423High· 8.8

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a low privileged user (member) can see and use invitation links sent to an admin…

▾ Twilightcoollabs · coolifyEPSS 0.35%via NVD

CVE-2025-64422Medium· 4.3

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify vstarting with version 4.0.0-beta.434, the /login endpoint advertises a rate limit of 5 requests but can be trivially bypassed…

▾ Sunlitcoollabs · coolifyEPSS 0.31%via NVD

CVE-2025-64421High· 8.0

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

▾ Twilightcoollabs · coolifyEPSS 0.30%via NVD

CVE-2025-64420Critical· 9.9

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions prior to and including v4.0.0-beta.434, low privileged users are able to see the private key of the root user on the …

▾ Midnightcoollabs · coolifyEPSS 0.53%via NVD

CVE-2025-64419Critical· 9.6

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.445, parameters coming from docker-compose.yaml are not sanitized when used in commands. If a victim user cre…

▾ Midnightcoollabs · coolifyEPSS 0.65%via NVD

CVE-2025-59955Medium· 5.7

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Coolify versions prior to and including v4.0.0-beta.420.8 have an information disclosure vulnerability in the `/api/v1/teams/{team_id}/me…

▾ Sunlitcoollabs · coolifyEPSS 0.30%via NVD

CVE-2025-59158High· 8.0

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Coolify versions prior to and including v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project cre…

▾ Twilightcoollabs · coolifyEPSS 0.50%via NVD

CVE-2025-59157Critical· 9.9

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.420.7, the Git Repository field during project creation is vulnerable to command injection. User input is not…

▾ Midnightcoollabs · coolifyEPSS 1.8%via NVD

CVE-2025-59156High· 8.8

10mo ago

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.420.7, a Remote Code Execution (RCE)*vulnerability exists in Coolify's application deployment workflow. This …

▾ Twilightcoollabs · coolifyEPSS 1.00%via NVD

CVE-2025-34161High· 8.8PoC

1y ago

Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow

Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell …

▾ Midnightcoollabs · coolifyEPSS 3.0%via NVD

CVE-2025-34159High· 8.8PoC

1y ago

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Do…

▾ Midnightcoollabs · coolifyEPSS 0.97%via NVD

CVE-2025-34157Critical· 9.0PoC

1y ago

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name con…

▾ Abyssalcoollabs · coolifyEPSS 0.48%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases

Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial