Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

30464

Tracked CVEs

2987

Critical

380

Exploited in wild

4938

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page874
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

26 matches

CVE-2026-63443High· 8.3

1w ago

Coder allows organizations to provision remote development environments via Terraform

Coder allows organizations to provision remote development environments via Terraform. Prior to 2.29.19, 2.32.9, 2.33.10, and 2.34.4, agentConn.apiClient() follows redirects while its custom transport accepts the host from the redirected…

▾ Twilightcoder · coderEPSS 0.42%via NVD

GO-2026-6267None

4w ago

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings in github.com/coder/coder

▾ Sunlitcoder · github.com/coder/codervia OSV

GO-2026-6265None

4w ago

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder

▾ Sunlitcoder · github.com/coder/codervia OSV

GHSA-8fxq-53rx-ph5fLow· 3.7

1mo ago

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison

▾ Sunlitcoder · github.com/coder/coder/v2via GHSA

GHSA-h58c-xccx-75m3Low· 3.4

Sound the depths of every vulnerability.

Trending now

Feed

Coder allows organizations to provision remote development environments via Terraform

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings in github.com/coder/coder

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write

Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking

Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass

Coder: User-admin role can reset owner account password

Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID

Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access

Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service

Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps

Coder's sub-agent app registration bypasses template port-sharing policy enforcement

Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints

Suspended Coder users retain access to AI Bridge LLM proxy endpoints

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component

Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing

Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

Coder allows organizations to provision remote development environments via Terraform

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings in github.com/coder/coder

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write

Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking

Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass

Coder: User-admin role can reset owner account password

Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID

Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access

Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service

Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps

Coder's sub-agent app registration bypasses template port-sharing policy enforcement

Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints

Suspended Coder users retain access to AI Bridge LLM proxy endpoints

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component

Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing

Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live