Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

68753

Tracked CVEs

6386

Critical

701

Exploited in wild

4937

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1580
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

43 matches

CVE-2026-115369Low· 2.2

6d ago

OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs

OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a CSR when use_csr_sans is enabled. Authenticated callers with sign permission can submit a CSR with an out-of-range IP …

▾ Sunlitopenbao · openbaoEPSS 0.13%via CVEORG

CVE-2026-115366Low· 2.6

6d ago

OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/* is not restricted to the root namespace. Atta…

▾ Sunlitopenbao · openbaoEPSS 0.18%via CVEORG

CVE-2026-115364Low· 2.2

6d ago

OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints

OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by omitting the X-Vault-Header. When require_request_header is enabled, attackers can send requests via server-side reques…

▾ Sunlitopenbao · openbaoEPSS 0.32%via CVEORG

CVE-2026-115363Low· 3.3

6d ago

OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration

OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the tls_acme_eab_mac_key value through the sys/config/state/sanitized endpoint. Callers of the sanitized configuration endpoi…

▾ Sunlitopenbao · openbaoEPSS 0.13%via CVEORG

CVE-2026-115362Low· 2.2

6d ago

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass

OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method, leaving expired Secret IDs valid until the periodic tidy removes them. An attacker holding an expired, untidied Secret ID …

▾ Sunlitopenbao · openbaoEPSS 0.20%via CVEORG

CVE-2026-115361Medium· 4.1

6d ago

OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial

OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on forbidden identity metadata templates within wildcard grants. Attackers whose identity metadata contains wildcard or path segments…

▾ Sunlitopenbao · openbaoEPSS 0.21%via CVEORG

CVE-2026-115360Medium· 4.7

6d ago

OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI

OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects users not authenticated to OpenBao. Attackers can craft OIDC links that redirect unauthenticated users to attacker-controlled de…

▾ Sunlitopenbao · openbaoEPSS 0.25%via CVEORG

CVE-2026-115359Low· 3.7

6d ago

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing

OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution fails for requests with form-encoded bodies or forwarded certificates, so quota rules scoped to backend-specific roles ar…

▾ Sunlitopenbao · openbaoEPSS 0.19%via CVEORG

CVE-2026-115358Low· 2.0

6d ago

OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters

OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. Attackers can submit requests with malformed TypeKVPair or TypeHea…

▾ Sunlitopenbao · openbaoEPSS 0.19%via CVEORG

CVE-2026-115357Low· 2.2

6d ago

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses

OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging f…

▾ Sunlitopenbao · openbaoEPSS 0.21%via CVEORG

CVE-2026-115356Medium· 5.4

6d ago

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation

OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes Auth method, that the service account token originally used to authenticate is still valid. An authenticated attacker can keep re…

▾ Sunlitopenbao · openbaoEPSS 0.21%via CVEORG

CVE-2026-77285Low· 2.4⚖ disputed

1mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write secrets from env_template to standard output when command/agent/exec/exec.go re-created the template runn…

▾ Sunlitopenbao · openbaoEPSS 0.17%via NVD

CVE-2026-63132Critical· 9.2

1mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's handleLogicalRecovery path in http/logical.go compared the highly privileged recovery token with ordinary string equality. A remote unauthentic…

▾ Midnightopenbao · openbaoEPSS 0.63%via NVD

CVE-2026-63131Medium· 6.0

1mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could evaluate a broader wildcard ACL grant before more-specific trailing-wildcard ACL paths with capabilities = ["deny"] f…

▾ Sunlitopenbao · openbaoEPSS 0.48%via NVD

CVE-2026-71543High· 7.2

1mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, templated ACL, PKI, and SSH policies could substitute attacker-controlled identity data without rejecting syntax-significant characters. In ACL templated…

▾ Twilightopenbao · github.com/openbao/openbaoEPSS 0.42%via NVD

CVE-2026-55770Medium· 6.8PoC

1mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/lda…

▾ Twilightopenbao · openbaoEPSS 0.53%via NVD

CVE-2026-55774Low· 2.1

1mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:lease_id in one namespace could revoke a lease in another namespace when the foreign lease_id was known…

▾ Sunlitopenbao · openbaoEPSS 0.56%via NVD

CVE-2026-55775Low· 2.3⚖ disputed

1mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespa…

▾ Sunlitopenbao · openbaoEPSS 0.48%via NVD

CVE-2026-55776Medium· 6.5PoC

1mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/* could terminate the server process by setting derived to true while the type paramete…

▾ Twilightopenbao · openbaoEPSS 0.61%via NVD

CVE-2026-45808High

2mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying cred…

▾ Twilightopenbao · github.com/openbao/openbaoEPSS 0.43%via NVD

CVE-2026-46358Medium

2mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers …

▾ Sunlitopenbao · github.com/openbao/openbaoEPSS 0.21%via NVD

CVE-2026-46405Medium· 5.3

2mo ago

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, in OpenBao's Kerberos auth method on the `GET` handler, or when an `Authorization: Negotiate` header is supplied, the response is includes a `log…

▾ Sunlitopenbao · github.com/openbao/openbaoEPSS 0.62%via NVD

CVE-2026-42186Low

5mo ago

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs

OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints

OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass

OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial

OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing

OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao's Namespace Deletion May Not Delete Data Properly

OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)

OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs

OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints

OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass

OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial

OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing

OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao is an open source identity-based secrets management system

OpenBao's Namespace Deletion May Not Delete Data Properly

OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)

OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial