Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

70332

Tracked CVEs

6559

Critical

748

Exploited in wild

1226

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.8Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package1895
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab367
6CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

11 matches

CVE-2026-112138Medium· 4.7PoC

2w ago

diem-project diem dmCodeEditor actions.class.php join path traversal

A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can …

▾ Twilightdiem-project · diemEPSS 0.33%via CVEORG

CVE-2026-112042Low· 3.5PoC

2w ago

diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting

A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affects the function dmBaseLinkTag::text of the file dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php of the component d…

▾ Twilightdiem-project · diemEPSS 0.20%via CVEORG

CVE-2026-112040Medium· 4.3PoC

2w ago

diem-project diem Sign-In BasedmUserActions.class.php redirect

A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php of the componen…

▾ Twilightdiem-project · diemEPSS 0.26%via CVEORG

CVE-2026-112041Low· 3.7PoC

2w ago

diem-project diem dmString.php random weak prng

A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmString.php. Such manipulation leads to cryp…

▾ Twilightdiem-project · diemEPSS 0.31%via CVEORG

CVE-2026-112037Low· 3.7PoC

2w ago

diem-project diem Google Analytics Client gapi.class.php certificate validation

A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file dmCorePlugin/lib/vendor/gapi/gapi.class.php of the component Google Analytics Client. Executing a mani…

▾ Twilightdiem-project · diemEPSS 0.18%via CVEORG

CVE-2026-112038Low· 2.4PoC

2w ago

diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting

A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Servic…

▾ Twilightdiem-project · diemEPSS 0.21%via CVEORG

CVE-2026-112039Low· 2.4PoC

2w ago

diem-project diem Administrative Console actions.class.php append cross site scripting

A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is the function append of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administr…

▾ Twilightdiem-project · diemEPSS 0.21%via CVEORG

CVE-2026-112029Low· 2.5PoC

2w ago

diem-project diem SHA1 PluginDmUser.class.php weak password hash

A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to p…

▾ Twilightdiem-project · diemEPSS 0.08%via CVEORG

CVE-2026-112030Medium· 6.3PoC

2w ago

diem-project diem dmDataLoad.php default password

A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to…

▾ Twilightdiem-project · diemEPSS 0.26%via CVEORG

CVE-2026-86183Medium· 5.3PoC

1mo ago

A vulnerability was identified in diem-project diem up to 5.1.3

A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmFrontPlugin/modules/dmWidget/lib/BasedmWidgetActions.class.php of the component dmWidget. Such manipulation of the arg…

▾ Twilightdiem-project · diemEPSS 0.57%via NVD

CVE-2026-86182Medium· 4.3PoC

1mo ago

A vulnerability was determined in diem-project diem up to 5.1.3

A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component dmConsole. This manipulation of the argument…

▾ Twilightdiem-project · diemEPSS 0.23%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

diem-project diem dmCodeEditor actions.class.php join path traversal

diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting

diem-project diem Sign-In BasedmUserActions.class.php redirect

diem-project diem dmString.php random weak prng

diem-project diem Google Analytics Client gapi.class.php certificate validation

diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting

diem-project diem Administrative Console actions.class.php append cross site scripting

diem-project diem SHA1 PluginDmUser.class.php weak password hash

diem-project diem dmDataLoad.php default password

A vulnerability was identified in diem-project diem up to 5.1.3

A vulnerability was determined in diem-project diem up to 5.1.3

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

diem-project diem dmCodeEditor actions.class.php join path traversal

diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting

diem-project diem Sign-In BasedmUserActions.class.php redirect

diem-project diem dmString.php random weak prng

diem-project diem Google Analytics Client gapi.class.php certificate validation

diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting

diem-project diem Administrative Console actions.class.php append cross site scripting

diem-project diem SHA1 PluginDmUser.class.php weak password hash

diem-project diem dmDataLoad.php default password

A vulnerability was identified in diem-project diem up to 5.1.3

A vulnerability was determined in diem-project diem up to 5.1.3

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial