Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

32791

Tracked CVEs

3254

Critical

405

Exploited in wild

3648

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page874
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

14 matches

CVE-2026-56675High· 8.3

2d ago

9router /v1 APIs has unauthenticated access via reverse proxy locality collapse

▾ Twilight9router · 9routerEPSS 0.50%via GHSA

CVE-2026-56679High

2d ago

9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade

▾ Twilight9router · 9routerEPSS 0.52%via GHSA

CVE-2026-56678Medium· 6.4

2d ago

9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

▾ Sunlit9router · 9routerEPSS 0.29%via GHSA

CVE-2026-56676High· 7.4

2d ago

9router: Image prefetch DNS rebinding allows SSRF to internal services

▾ Twilight9router · 9routerEPSS 0.26%via GHSA

CVE-2026-56681High· 7.3PoC

3d ago

9Router is an AI router & token saver

9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper trust the client-supplied X-9r-Real-Ip header in src/dashboardGuard.js when i…

▾ Midnight9router · 9routerEPSS 0.52%via NVD

CVE-2026-55638High· 8.6

4w ago

9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass

▾ Twilight9router · 9routerEPSS 0.61%via GHSA

CVE-2026-56677High· 8.6

1mo ago

9Router is an AI router & token saver

9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery() in src/lib/auth/oidc.js with…

▾ Twilight9router · 9routerEPSS 0.33%via NVD

CVE-2026-55501High· 7.3

2mo ago

9router: Login brute-force protection bypass via spoofed X-Forwarded-For header

▾ Twilight9router · 9routerEPSS 0.52%via GHSA

GHSA-vjc7-jrh9-9j86Critical· 10.0

2mo ago

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

▾ Midnight9router · 9routervia GHSA

CVE-2026-55500Critical· 9.9

2mo ago

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

▾ Midnight9router · 9routerEPSS 0.69%via GHSA

CVE-2026-59800Critical

2mo ago

9router: Missing Authorization and OS Command Injection

▾ Midnight9router · 9routerEPSS 2.0%via GHSA

CVE-2026-49352Critical· 9.8PoC

2mo ago

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

▾ Abyssal9router · 9routerEPSS 0.60%via GHSA

CVE-2026-49353High· 7.5

2mo ago

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING

▾ Twilight9router · 9routerEPSS 0.36%via GHSA

GHSA-g6g7-pvmx-m74pCritical

2mo ago

9router: Missing Authorization and OS Command Injection

▾ Midnight9router · 9routervia GHSA

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

9router /v1 APIs has unauthenticated access via reverse proxy locality collapse

9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade

9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

9router: Image prefetch DNS rebinding allows SSRF to internal services

9Router is an AI router & token saver

9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass

9Router is an AI router & token saver

9router: Login brute-force protection bypass via spoofed X-Forwarded-For header

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

9router: Missing Authorization and OS Command Injection

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING

9router: Missing Authorization and OS Command Injection

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

9router /v1 APIs has unauthenticated access via reverse proxy locality collapse

9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade

9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

9router: Image prefetch DNS rebinding allows SSRF to internal services

9Router is an AI router & token saver

9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass

9Router is an AI router & token saver

9router: Login brute-force protection bypass via spoofed X-Forwarded-For header

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

9router: Missing Authorization and OS Command Injection

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING

9router: Missing Authorization and OS Command Injection

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live