Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

34604

Tracked CVEs

3377

Critical

421

Exploited in wild

4701

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page883
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code374
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

15 matches

CVE-2026-96672Medium· 6.4

3d ago

Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted methods before passing them to frappe.call()

Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted methods before passing them to frappe.call(). Accounts Managers can supply arbitrary dotted Python pa…

▾ SunlitFrappe · ERPNextEPSS 0.22%via NVD

CVE-2026-94113Medium· 6.5

6d ago

Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet endpoints that fail to enforce doctype permissions

Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet endpoints that fail to enforce doctype permissions. Authenticated attackers can call get_projectwise…

▾ SunlitFrappe · ERPNextEPSS 0.42%via NVD

CVE-2026-54343High· 8.7

1w ago

Frappe Learning Management System (LMS) is a learning system that helps users structure their content

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, a remote attacker can request a traversal path handled by SCORMRenderer.render in lms/page_renderers.py. The …

▾ Twilightfrappe · lmsEPSS 0.68%via NVD

CVE-2026-54524High· 7.1

1w ago

Frappe HR is an open-source human resources management solution (HRMS)

Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.7.0, an authenticated user with the HR User role can inject SQL through filters in the Salary Payments Based on Payment Mode report. In hrms/payroll/repo…

▾ Twilightfrappe · hrmsEPSS 0.48%via NVD

CVE-2023-51769Medium· 6.1

1w ago

Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.

▾ SunlitFrappe · FrappeEPSS 0.19%via NVD

CVE-2026-81731Medium· 5.4

1mo ago

Frappe 15.11.0 through 16.32.0 Stored XSS via Workspace Link Description

Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filtering. The description field of the Workspace Link doctype is declared with "ignore_xss_filter": 1 in frappe/desk/doctype/workspace_link/wor…

▾ Sunlitfrappe · frappeEPSS 0.30%via CVEORG

CVE-2026-65974Critical· 9.9

1mo ago

ERPNext is a free and open source Enterprise Resource Planning tool

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe execution because frappe.render_template is exposed without fo…

▾ Midnightfrappe · erpnextEPSS 1.0%via NVD

CVE-2026-31017Critical· 9.1

5mo ago

A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficiently sanitized before being rendered into PDF

A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficiently sanitized before being rendered into PDF. When genera…

▾ Midnightfrappe · erpnextEPSS 0.42%via NVD

CVE-2025-67289Critical· 9.6

9mo ago

An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code via uploading a crafted XML file.

▾ Midnightfrappe · erpnextEPSS 0.46%via NVD

CVE-2025-66581Medium· 6.5

9mo ago

Frappe Learning Management System (LMS) is a learning system that helps users structure their content

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.41.0, a flaw in the server-side authorization logic allowed authenticated users to perform actions beyond their assigned ro…

▾ Sunlitfrappe · learningEPSS 0.21%via NVD

CVE-2025-30217Medium

1y ago

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

▾ Twilightfrappe · erpnextEPSS 4.1%via NVD

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted methods before passing them to frappe.call()

Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet endpoints that fail to enforce doctype permissions

Frappe Learning Management System (LMS) is a learning system that helps users structure their content

Frappe HR is an open-source human resources management solution (HRMS)

Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.

Frappe 15.11.0 through 16.32.0 Stored XSS via Workspace Link Description

ERPNext is a free and open source Enterprise Resource Planning tool

A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficiently sanitized before being rendered into PDF

An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code via uploading a crafted XML file.

Frappe Learning Management System (LMS) is a learning system that helps users structure their content

Frappe has possibility of SQL injection due to improper validations

Frappe has Possibility of Remote Code Execution due to improper validation

Frappe vulnerable to information disclosure leading to account takeover

Frappe has possibility of SQL injection due to improper validations

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted methods before passing them to frappe.call()

Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet endpoints that fail to enforce doctype permissions

Frappe Learning Management System (LMS) is a learning system that helps users structure their content

Frappe HR is an open-source human resources management solution (HRMS)

Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.

Frappe 15.11.0 through 16.32.0 Stored XSS via Workspace Link Description

ERPNext is a free and open source Enterprise Resource Planning tool

A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficiently sanitized before being rendered into PDF

An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code via uploading a crafted XML file.

Frappe Learning Management System (LMS) is a learning system that helps users structure their content

Frappe has possibility of SQL injection due to improper validations

Frappe has Possibility of Remote Code Execution due to improper validation

Frappe vulnerable to information disclosure leading to account takeover

Frappe has possibility of SQL injection due to improper validations

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live