Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

55308

Tracked CVEs

5285

Critical

544

Exploited in wild

11500

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-88771Critical· 9.8Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 1…479

This week's digest →All digests

Feed

6 matches

CVE-2026-108820Medium· 6.3

3d ago

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can le…

▾ Sunlitagno-agi · agnovia NVD

CVE-2026-108819High· 7.3PoC

3d ago

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-manage…

▾ Midnightagno-agi · agnoEPSS 0.31%via NVD

CVE-2026-108818High· 7.3PoC

3d ago

A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6

A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument security_key leads to missing authentication. The attack ma…

▾ Midnightagno-agi · agnoEPSS 0.53%via NVD

CVE-2026-108817Medium· 5.5PoC

3d ago

A vulnerability was determined in agno-agi agno up to 3.0.9

A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument …

▾ Twilightagno-agi · agnoEPSS 1.1%via NVD

CVE-2026-108816Medium· 6.3

3d ago

A vulnerability was found in agno-agi agno up to 3.0.6

A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. T…

▾ Sunlitagno-agi · agnovia NVD

CVE-2026-10105High· 8.3PoC

4mo ago

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method. Att…

▾ Midnightagno-agi · agnoEPSS 0.40%via NVD

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1

A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6

A vulnerability was determined in agno-agi agno up to 3.0.9

A vulnerability was found in agno-agi agno up to 3.0.6

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1

A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6

A vulnerability was determined in agno-agi agno up to 3.0.9

A vulnerability was found in agno-agi agno up to 3.0.6

agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values to the delete_by_metadata() method

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live