Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69320

Tracked CVEs

6432

Critical

702

Exploited in wild

4528

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1587
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

18 matches

CVE-2026-111923High· 7.5

1w ago

Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 byt…

▾ Twilightfleetdm · fleetEPSS 0.36%via CVEORG

CVE-2026-111924High· 7.5

1w ago

Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression

Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies. Attackers can send small, highly compressed requests with Content-En…

▾ Twilightfleetdm · fleetEPSS 0.36%via CVEORG

CVE-2026-103265Medium· 4.3

4w ago

Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint

Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets h…

▾ Sunlitfleetdm · fleetEPSS 0.20%via NVD

CVE-2026-103264Critical· 9.1

4w ago

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess t…

▾ Midnightfleetdm · fleetEPSS 0.31%via NVD

CVE-2026-101047Medium· 5.3

1mo ago

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM c…

▾ Sunlitfleetdm · fleetEPSS 0.24%via NVD

CVE-2026-101045High· 8.0

1mo ago

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them,…

▾ Twilightfleetdm · fleetEPSS 0.75%via NVD

CVE-2026-101046Low· 3.1

1mo ago

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities)

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities). The deprecated cursor-pagination helper appendListOptionsWithCursorToS…

▾ Sunlitfleetdm · fleetEPSS 0.17%via NVD

CVE-2026-54245High

2mo ago

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL injection through a host-supplied value that is used in a dat…

▾ Twilightfleetdm · github.com/fleetdm/fleetEPSS 0.57%via NVD

CVE-2026-48786Medium· 6.5

2mo ago

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint (POST /api/latest/fleet/targets) returned unmasked team enroll secrets and full team configuration, including cr…

▾ Sunlitfleetdm · github.com/fleetdm/fleet/v4EPSS 0.44%via NVD

CVE-2026-46370Medium· 6.5

2mo ago

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the labels host-listing endpoint (GET /api/v1/fleet/labels/{id}/hosts) allowed an authenticated user with the lowest-privilege O…

▾ Sunlitfleetdm · github.com/fleetdm/fleet/v4EPSS 0.37%via NVD

CVE-2026-46371Medium· 6.5

2mo ago

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint (GET /api/v1/fleet/mdm/apple/commands) allowed an authenticated user with the lowest-pri…

▾ Sunlitfleetdm · github.com/fleetdm/fleet/v4EPSS 0.37%via NVD

CVE-2026-41262Medium· 4.3

2mo ago

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery. In versions prior to 4.85.0, the global policy read endpoint (GET /api/latest/fleet/policies/{policy_id}) fails to verify team ownership of the requested policy, allowi…

▾ Sunlitfleetdm · github.com/fleetdm/fleet/v4EPSS 0.30%via NVD

GO-2026-6269None

2mo ago

Fleet: ORDER BY column injection on activity list endpoints in github.com/fleetdm/fleet

▾ Sunlitfleetdm · github.com/fleetdm/fleet/v4via OSV

GO-2026-6268None

2mo ago

Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs in github.com/fleetdm/fleet

▾ Sunlitfleetdm · github.com/fleetdm/fleet/v4via OSV

GHSA-q9c5-pp7m-fm2gMedium· 5.3

2mo ago

Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs

▾ Sunlitfleetdm · github.com/fleetdm/fleet/v4via GHSA

GHSA-rxhg-vcww-2mpwLow· 3.1

2mo ago

Fleet: ORDER BY column injection on activity list endpoints

▾ Sunlitfleetdm · github.com/fleetdm/fleet/v4via GHSA

CVE-2026-27806High· 7.8

6mo ago

Fleet is open source device management software

Fleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local user's password via a GUI dialog and interpolates it directly into a Tcl/expect script ex…

▾ Twilightfleetdm · fleetEPSS 0.11%via NVD

CVE-2021-21296Low· 2.7

5y ago

Fleet is an open source osquery manager

Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only…

▾ Sunlitfleetdm · fleetEPSS 1.9%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression

Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities)

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery

Fleet: ORDER BY column injection on activity list endpoints in github.com/fleetdm/fleet

Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs in github.com/fleetdm/fleet

Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs

Fleet: ORDER BY column injection on activity list endpoints

Fleet is open source device management software

Fleet is an open source osquery manager

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression

Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities)

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery

Fleet is an open-source device management platform built on osquery

Fleet: ORDER BY column injection on activity list endpoints in github.com/fleetdm/fleet

Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs in github.com/fleetdm/fleet

Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs

Fleet: ORDER BY column injection on activity list endpoints

Fleet is open source device management software

Fleet is an open source osquery manager

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial