Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

61141

Tracked CVEs

5674

Critical

577

Exploited in wild

13074

Last 7 days

This week's digest →All digests

Feed

6 matches

CVE-2026-112031Low· 3.5

yesterday

Chamilo LMS Ticket TicketManager.php addProject cross site scripting

A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the…

▾ SunlitChamilo · LMSvia CVEORG

CVE-2026-45143Critical· 9.0

1mo ago

Chamilo LMS is an open-source learning management system

Chamilo LMS is an open-source learning management system. From 2.0.0 through at least 2.1.0, Chamilo LMS stores private Message.content without server-side sanitization and renders it as HTML in assets/vue/views/message/MessageShow.vue a…

▾ Midnightchamilo · chamilo-lmsEPSS 0.49%via NVD

CVE-2026-45140Critical· 9.8PoC

1mo ago

Chamilo LMS is an open-source learning management system

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the affected endpoint, …

▾ Abyssalchamilo · chamilo-lmsEPSS 1.3%via NVD

CVE-2026-82535Medium· 6.1

1mo ago

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypas…

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypas…

▾ Sunlitchamilo · chamilo-lmsEPSS 0.47%via NVD

CVE-2025-66447None· 0.0

6mo ago

Chamilo LMS is a learning management system

Chamilo LMS is a learning management system. From 1.11.0 to 2.0-beta.1, anyone can trigger a malicious redirect through the use of the redirect parameter to /login. This vulnerability is fixed in 2.0-beta.2.

▾ Sunlitchamilo · chamilo_lmsEPSS 0.17%via NVD

CVE-2021-43687Medium· 6.1

4y ago