Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

70369

Tracked CVEs

6568

Critical

756

Exploited in wild

1072

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.8Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package1895
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab367
6CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

135 matches

CVE-2026-115796Medium· 4.3PoC

1w ago

Tenda F6 Web Management cross-site request forgery

A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotel…

▾ TwilightTenda · F6EPSS 0.16%via CVEORG

CVE-2026-115797Low· 3.7PoC

1w ago

Tenda F6 Web Management cleartext transmission

A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive informati…

▾ TwilightTenda · F6EPSS 0.20%via CVEORG

CVE-2026-114268Critical· 9.9PoC

2w ago

Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible t…

▾ AbyssalTenda · BE3L ProEPSS 0.51%via CVEORG

CVE-2026-113744Critical· 10.0PoC

2w ago

Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow

A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argu…

▾ AbyssalTenda · AC19EPSS 0.62%via CVEORG

CVE-2026-105778Critical· 9.9PoC

4w ago

A vulnerability has been found in Tenda AC5 02.03.01.111_multi

A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-base…

▾ AbyssalTenda · AC5EPSS 0.48%via NVD

CVE-2026-104610Critical· 10.0PoC

1mo ago

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype lea…

▾ AbyssalTenda · HG7EPSS 0.64%via NVD

CVE-2026-104611Critical· 9.1

1mo ago

A vulnerability was detected in Tenda AC9 15.03.02.13

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in s…

▾ MidnightTenda · AC9EPSS 0.49%via NVD

CVE-2026-90688Medium· 6.5PoC

1mo ago

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overf…

▾ TwilightTenda · W20EEPSS 0.71%via NVD

CVE-2026-90689High· 8.8

1mo ago

A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC

A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. Th…

▾ TwilightTenda · W20EEPSS 0.85%via NVD

CVE-2026-86300High· 7.3PoC

1mo ago

A flaw has been found in Tenda AC9 15.03.05.14

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been…

▾ MidnightTenda · AC9EPSS 0.84%via NVD

CVE-2026-86167Critical· 9.9PoC

1mo ago

A vulnerability was identified in Tenda HG10 300001138

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os command injection. Remot…

▾ AbyssalTenda · HG10EPSS 2.7%via NVD

CVE-2026-86166High· 8.8PoC

1mo ago

A vulnerability was determined in Tenda HG10 300001138

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer …

▾ MidnightTenda · HG10EPSS 0.85%via NVD

CVE-2026-86165Critical· 9.8PoC

1mo ago

A vulnerability was found in Tenda HG10 300001138

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be …

▾ AbyssalTenda · HG10EPSS 1.1%via NVD

CVE-2026-86153Critical· 9.1

1mo ago

A vulnerability has been found in Tenda CP3 27.5.57.101

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the at…

▾ MidnightTenda · CP3EPSS 0.71%via NVD

CVE-2026-86152Critical· 10.0

1mo ago

A flaw has been found in Tenda CP3 27.5.57.101

A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The at…

▾ MidnightTenda · CP3EPSS 2.9%via NVD

CVE-2026-86151Critical· 9.1PoC

1mo ago

A vulnerability was detected in Tenda CP3 27.5.57.101

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection…

▾ AbyssalTenda · CP3EPSS 2.9%via NVD

CVE-2026-86150Medium· 4.1

2mo ago

A security vulnerability has been detected in Tenda CP3 27.5.57.101

A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpa_passphrase leads to hard-coded credentials. The attack can be…

▾ SunlitTenda · CP3EPSS 0.38%via NVD

CVE-2026-86149Critical· 9.1

2mo ago

A weakness has been identified in Tenda CP3 27.5.57.101

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be in…

▾ MidnightTenda · CP3EPSS 2.9%via NVD

CVE-2026-86148Critical· 9.1

2mo ago

A security flaw has been discovered in Tenda CP3 27.5.57.101

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command inject…

▾ MidnightTenda · CP3EPSS 2.9%via NVD

CVE-2026-11498High· 8.8

4mo ago

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the component Web Management Interface. Performing a manipulation of …

▾ TwilightTenda · HG7EPSS 3.8%via NVD

CVE-2026-11553High· 8.8PoC

4mo ago

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attac…

▾ MidnightTenda · HG7EPSS 0.48%via NVD

CVE-2026-11499Critical· 9.8PoC

4mo ago

A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer ov…

▾ AbyssalTenda · HG7EPSS 6.6%via NVD

CVE-2026-8265Medium· 4.7

5mo ago

A security vulnerability has been detected in Tenda AC6 15.03.06.23

A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the component httpd. The manipulation of the argument wans.flag leads to os comman…

▾ Sunlittenda · ac6_firmwareEPSS 4.8%via NVD

CVE-2026-8264Medium· 6.3

5mo ago

A weakness has been identified in Tenda AC6 15.03.06.23

A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component httpd. Executing a manipulation of the argument wl2g.public.country/wl…

▾ Sunlittenda · ac6_firmwareEPSS 3.2%via NVD

CVE-2026-8263Medium· 4.7

5mo ago

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Performing a manipulation of the argument mac/ssid results …

▾ Sunlittenda · ac10u_firmwareEPSS 5.0%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Tenda F6 Web Management cross-site request forgery

Tenda F6 Web Management cleartext transmission

Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow

Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow

A vulnerability has been found in Tenda AC5 02.03.01.111_multi

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was detected in Tenda AC9 15.03.02.13

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC

A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC

A flaw has been found in Tenda AC9 15.03.05.14

A vulnerability was identified in Tenda HG10 300001138

A vulnerability was determined in Tenda HG10 300001138

A vulnerability was found in Tenda HG10 300001138

A vulnerability has been found in Tenda CP3 27.5.57.101

A flaw has been found in Tenda CP3 27.5.57.101

A vulnerability was detected in Tenda CP3 27.5.57.101

A security vulnerability has been detected in Tenda CP3 27.5.57.101

A weakness has been identified in Tenda CP3 27.5.57.101

A security flaw has been discovered in Tenda CP3 27.5.57.101

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon

A security vulnerability has been detected in Tenda AC6 15.03.06.23

A weakness has been identified in Tenda AC6 15.03.06.23

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Tenda F6 Web Management cross-site request forgery

Tenda F6 Web Management cleartext transmission

Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow

Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow

A vulnerability has been found in Tenda AC5 02.03.01.111_multi

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was detected in Tenda AC9 15.03.02.13

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC

A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC

A flaw has been found in Tenda AC9 15.03.05.14

A vulnerability was identified in Tenda HG10 300001138

A vulnerability was determined in Tenda HG10 300001138

A vulnerability was found in Tenda HG10 300001138

A vulnerability has been found in Tenda CP3 27.5.57.101

A flaw has been found in Tenda CP3 27.5.57.101

A vulnerability was detected in Tenda CP3 27.5.57.101

A security vulnerability has been detected in Tenda CP3 27.5.57.101

A weakness has been identified in Tenda CP3 27.5.57.101

A security flaw has been discovered in Tenda CP3 27.5.57.101

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon

A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon

A security vulnerability has been detected in Tenda AC6 15.03.06.23

A weakness has been identified in Tenda AC6 15.03.06.23

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial