Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

62113

Tracked CVEs

5775

Critical

579

Exploited in wild

11692

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

This week's digest →All digests

Feed

9 matches

CVE-2026-113397High· 7.4PoC

today

DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection

A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument…

▾ MidnightDrayTek · Vigor2960via CVEORG

CVE-2026-113392High· 7.4PoC

today

DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal

A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Performing a manipulation of the argument action results in p…

▾ MidnightDrayTek · Vigor2960via CVEORG

CVE-2026-113394High· 7.4

today

DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal

A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument setSWMProfile leads to path traversal. It is possib…

▾ TwilightDrayTek · Vigor2960via CVEORG

CVE-2026-113393Medium· 6.3PoC

today

DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument upload_pa…

▾ TwilightDrayTek · Vigor2960via CVEORG

CVE-2026-113395High· 7.4PoC

today

DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal

A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the component swmconfigupload. The manipulation of the argument multi…

▾ MidnightDrayTek · Vigor2960via CVEORG

CVE-2026-113396High· 7.4PoC

today

DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection

A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cgi-bin/mainfunction.cgi of the component Rename Table Handler. This manipulation of the argument n…

▾ MidnightDrayTek · Vigor2960via CVEORG

CVE-2026-113390Critical· 9.9

today

DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection

A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Interface. This manipulation of the argument usefile/usescript/…

▾ MidnightDrayTek · Vigor2960via CVEORG

CVE-2026-113391Critical· 9.9PoC

today

DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload Endpoint. Such manipulation leads to command injection. The at…

▾ AbyssalDrayTek · Vigor2960via CVEORG

CVE-2026-113389Critical· 9.9PoC

today

DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectio…

▾ AbyssalDrayTek · Vigor2960via CVEORG

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection

DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal

DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal

DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload

DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal

DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection

DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection

DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection

DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection

DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal

DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal

DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload

DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal

DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection

DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection

DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection

DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live