Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

30464

Tracked CVEs

2987

Critical

380

Exploited in wild

4938

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page874
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

16 matches

CVE-2026-43891High· 7.5

4mo ago

changedetection.io has an Arbitrary Local File Read via a crafted backup restore

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.35%via OSV

CVE-2026-35000None

5mo ago

ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows …

ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked XPath 3.0/3.1 functions such as json-doc(…

▾ Sunlitchangedetection-io · changedetection-ioEPSS 0.28%via OSV

CVE-2026-33981High

5mo ago

Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.47%via OSV

CVE-2026-29038Medium· 6.1

6mo ago

changedetection.io has Reflected XSS in its RSS Tag Error Response

▾ Sunlitchangedetection-io · changedetection-ioEPSS 0.28%via OSV

CVE-2026-29039High

6mo ago

changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.48%via OSV

CVE-2026-29065High

6mo ago

changedetection.io has Zip Slip vulnerability in the backup restore functionality

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.53%via OSV

CVE-2026-27645Medium· 6.1PoC

6mo ago

changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.45%via OSV

CVE-2026-27696High· 8.6

6mo ago

changedetection.io is Vulnerable to SSRF via Watch URLs

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.45%via OSV

CVE-2026-25527Medium· 5.3PoC

7mo ago

changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` ro…

changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` route accepts `group=".."`, which causes `send_from_directory("static/..", filename)` to execute. This…

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.92%via OSV

CVE-2025-52558High

1y ago

ChangeDetection.io XSS in watch overview

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.55%via OSV

CVE-2024-56509High· 8.6

1y ago

changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.70%via OSV

CVE-2024-51998High· 8.6

1y ago

changedetection.io path traversal using file URI scheme without supplying hostname

▾ Twilightchangedetection-io · changedetection-ioEPSS 0.69%via OSV

CVE-2024-51483Medium· 6.5PoC

1y ago

changedetection.io Path Traversal

▾ Twilightchangedetection-io · changedetection-ioEPSS 2.3%via OSV

CVE-2024-32651Critical· 10.0PoC

1y ago

changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution

▾ Abyssalchangedetection-io · changedetection-ioEPSS 84%via OSV

CVE-2024-34061Medium· 4.3PoC

2y ago

changedetection.io Cross-site Scripting vulnerability

▾ Twilightchangedetection-io · changedetection-ioEPSS 1.3%via OSV

CVE-2024-23329Low· 3.7

2y ago

changedetection.io API endpoint is not secured with API token

▾ Sunlitchangedetection-io · changedetection-ioEPSS 0.59%via OSV

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

changedetection.io has an Arbitrary Local File Read via a crafted backup restore

ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows …

Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters

changedetection.io has Reflected XSS in its RSS Tag Error Response

changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()

changedetection.io has Zip Slip vulnerability in the backup restore functionality

changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

changedetection.io is Vulnerable to SSRF via Watch URLs

changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` ro…

ChangeDetection.io XSS in watch overview

changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

changedetection.io path traversal using file URI scheme without supplying hostname

changedetection.io Path Traversal

changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution

changedetection.io Cross-site Scripting vulnerability

changedetection.io API endpoint is not secured with API token

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

changedetection.io has an Arbitrary Local File Read via a crafted backup restore

ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows …

Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters

changedetection.io has Reflected XSS in its RSS Tag Error Response

changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()

changedetection.io has Zip Slip vulnerability in the backup restore functionality

changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

changedetection.io is Vulnerable to SSRF via Watch URLs

changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` ro…

ChangeDetection.io XSS in watch overview

changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

changedetection.io path traversal using file URI scheme without supplying hostname

changedetection.io Path Traversal

changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution

changedetection.io Cross-site Scripting vulnerability

changedetection.io API endpoint is not secured with API token

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live