Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68799

Tracked CVEs

6389

Critical

701

Exploited in wild

4983

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1587
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

17 matches

CVE-2026-73783Medium· 4.9

1mo ago

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system.

▾ Sunlithpe · arubaos-cxEPSS 0.44%via NVD

CVE-2026-73780High· 8.3

1mo ago

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input again…

▾ Twilighthpe · arubaos-cxEPSS 0.20%via NVD

CVE-2026-73759Medium· 6.5

1mo ago

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of norm…

▾ Sunlithpe · arubaos-cxEPSS 0.29%via NVD

CVE-2026-73752High· 8.8

1mo ago

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to …

▾ Twilighthpe · arubaos-cxEPSS 0.47%via NVD

CVE-2026-73749Critical· 9.8

1mo ago

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected s…

▾ Midnighthpe · arubaos-cxEPSS 0.82%via NVD

CVE-2026-73751High· 8.8

1mo ago

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system.

▾ Twilighthpe · arubaos-cxEPSS 0.66%via NVD

CVE-2026-73750High· 8.8

1mo ago

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or …

▾ Twilighthpe · arubaos-cxEPSS 0.80%via NVD

CVE-2026-73778High· 8.1

1mo ago

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state be…

▾ Twilighthpe · arubaos-cxEPSS 0.51%via NVD

CVE-2026-73763High· 7.1

1mo ago

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the af…

▾ Twilighthpe · arubaos-cxEPSS 0.47%via NVD

CVE-2026-73753High· 8.8

1mo ago

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system.

▾ Twilighthpe · arubaos-cxEPSS 0.66%via NVD

CVE-2026-23816High· 7.2

7mo ago

A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

▾ Twilighthpe · arubaos-cxEPSS 1.2%via NVD

CVE-2026-23815High· 7.2

7mo ago

A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection

A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute unauthorized comma…

▾ Twilighthpe · arubaos-cxEPSS 0.97%via NVD

CVE-2026-23814High· 8.8

7mo ago

A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior.

▾ Twilighthpe · arubaos-cxEPSS 0.58%via NVD

CVE-2026-23813Critical· 9.8PoC

7mo ago

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable res…

▾ Abyssalhpe · arubaos-cxEPSS 0.77%via NVD

CVE-2026-23600Critical· 9.8

8mo ago

A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).

▾ Midnighthpe · autopass_license_serverEPSS 1.00%via NVD

CVE-2025-25040Low· 3.3

1y ago

A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: - AOS-CX 10.14.xxxx : All patches - AOS-CX 10.15.xxxx : 10.15.10…

A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: - AOS-CX 10.14.xxxx : All patches - AOS-CX 10.15.xxxx : 10.15.10…

▾ Sunlithpe · arubaos-cxEPSS 0.14%via NVD

CVE-2024-54010Low· 3.4

1y ago

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this at…

▾ Sunlithpe · arubaos-cxEPSS 0.24%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system.

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system.

A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection

A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior.

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls

A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).

A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: - AOS-CX 10.14.xxxx : All patches - AOS-CX 10.15.xxxx : 10.15.10…

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system.

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system.

A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection

A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior.

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls

A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).

A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: - AOS-CX 10.14.xxxx : All patches - AOS-CX 10.15.xxxx : 10.15.10…

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial