Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

34607

Tracked CVEs

3379

Critical

421

Exploited in wild

4703

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page883
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code374
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

33 matches

CVE-2026-93991High· 7.7

1w ago

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. A…

▾ Twilightargoproj · argo-workflowsEPSS 0.44%via NVD

CVE-2026-82277Critical· 9.8

4w ago

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, Rest…

▾ Midnightargoproj · argo-rolloutsEPSS 0.78%via NVD

CVE-2026-54526High

1mo ago

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

▾ Twilightargoproj · github.com/argoproj/argo-workflows/v4EPSS 0.55%via GHSA

CVE-2026-45738High· 7.3

2mo ago

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD users with application write access can set link.argocd.argoproj.io/* annotations whose pipe-separated values are rende…

▾ Twilightargoproj · argo_cdEPSS 0.61%via NVD

CVE-2026-45737Medium· 6.3

2mo ago

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configura…

▾ Sunlitargoproj · argo_cdEPSS 0.52%via NVD

CVE-2026-42880Critical· 9.6PoC

4mo ago

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

▾ Abyssalargoproj · github.com/argoproj/argo-cd/v3EPSS 0.56%via OSV

CVE-2026-42294High· 7.5

4mo ago

Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

▾ Twilightargoproj · github.com/argoproj/argo-workflows/v3EPSS 0.74%via OSV

CVE-2026-42295High

4mo ago

Argo vulnerable to exposure of artifact repository credentials

▾ Twilightargoproj · github.com/argoproj/argo-workflows/v4EPSS 0.40%via OSV

CVE-2026-40886High· 7.7

5mo ago

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

▾ Twilightargoproj · github.com/argoproj/argo-workflows/v4EPSS 0.59%via OSV

CVE-2026-28229High· 7.5

6mo ago

Unauthorized access to Argo Workflows Template

▾ Twilightargoproj · github.com/argoproj/argo-workflows/v3EPSS 0.78%via OSV

CVE-2026-23960Medium· 5.4

8mo ago

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbit…

▾ Sunlitargoproj · argo_workflowsEPSS 0.40%via NVD

CVE-2025-47933Critical· 9.0

1y ago

The Argo CD web terminal session does not handle the revocation of user permissions properly

▾ Sunlitargoproj · github.com/argoproj/argo-cd/v2EPSS 0.69%via OSV

CVE-2024-37152Medium· 5.3PoC

2y ago

Unauthenticated Access to sensitive settings in Argo CD

▾ Twilightargoproj · github.com/argoproj/argo-cd/v2/serverEPSS 2.3%via OSV

CVE-2024-36106Medium· 4.3

2y ago

Argo-cd authenticated users can enumerate clusters by name

▾ Sunlitargoproj · github.com/argoproj/argo-cdEPSS 0.41%via OSV

CVE-2024-32476Medium· 6.5

2y ago

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences

▾ Sunlitargoproj · github.com/argoproj/argo-cd/v2EPSS 1.0%via OSV

CVE-2024-31990Medium· 4.8

2y ago

Argo CD's API server does not enforce project sourceNamespaces

▾ Sunlitargoproj · github.com/argoproj/argo-cd/v2EPSS 0.45%via OSV

CVE-2024-29893Medium· 6.5

2y ago

ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability

▾ Sunlitargoproj · github.com/argoproj/argo-cd/v2EPSS 0.97%via OSV

CVE-2024-21661High· 7.5

2y ago

Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment

▾ Twilightargoproj · github.com/argoproj/argo-cdEPSS 1.2%via OSV

CVE-2024-21652Medium· 5.4

2y ago

Bypassing Rate Limit and Brute Force Protection Using Cache Overflow

▾ Sunlitargoproj · github.com/argoproj/argo-cd/v2EPSS 0.75%via OSV

CVE-2024-28175Critical· 9.0

2y ago

Cross-site scripting on application summary component

▾ Midnightargoproj · github.com/argoproj/argo-cdEPSS 0.65%via OSV

CVE-2023-50726Medium· 6.4

2y ago

Users with `create` but not `override` privileges can perform local sync

▾ Sunlitargoproj · github.com/argoproj/argo-cdEPSS 0.53%via OSV

CVE-2024-22424High· 8.3

2y ago

github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

▾ Twilightargoproj · github.com/argoproj/argo-cdEPSS 0.39%via OSV

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

Argo vulnerable to exposure of artifact repository credentials

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

Unauthorized access to Argo Workflows Template

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes

Argo CD allows cross-site scripting on repositories page

Argo CD does not scrub secret values from patch errors

Argo CD GitOps Engine does not scrub secret values from patch errors

The Argo CD web terminal session does not handle the revocation of user permissions properly

Unauthenticated Access to sensitive settings in Argo CD

Argo-cd authenticated users can enumerate clusters by name

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences

Argo CD's API server does not enforce project sourceNamespaces

ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability

Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment

Bypassing Rate Limit and Brute Force Protection Using Cache Overflow

Cross-site scripting on application summary component

Users with `create` but not `override` privileges can perform local sync

github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

Argo vulnerable to exposure of artifact repository credentials

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

Unauthorized access to Argo Workflows Template

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes

Argo CD allows cross-site scripting on repositories page

Argo CD does not scrub secret values from patch errors

Argo CD GitOps Engine does not scrub secret values from patch errors

The Argo CD web terminal session does not handle the revocation of user permissions properly

Unauthenticated Access to sensitive settings in Argo CD

Argo-cd authenticated users can enumerate clusters by name

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences

Argo CD's API server does not enforce project sourceNamespaces

ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability

Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment

Bypassing Rate Limit and Brute Force Protection Using Cache Overflow

Cross-site scripting on application summary component

Users with `create` but not `override` privileges can perform local sync

github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live