Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

34448

Tracked CVEs

3360

Critical

418

Exploited in wild

4626

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page883
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

7 matches

CVE-2026-94003Critical· 10.0PoC

6d ago

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. …

▾ AbyssalComfast · CF-N1-SEPSS 1.0%via NVD

CVE-2025-9586Medium· 6.3

1y ago

A vulnerability was identified in Comfast CF-N1 2.6.0

A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be perfo…

▾ Sunlitcomfast · cf-n1_firmwareEPSS 8.3%via NVD

CVE-2025-9585Medium· 6.3

1y ago

A vulnerability was determined in Comfast CF-N1 2.6.0

A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possi…

▾ Sunlitcomfast · cf-n1_firmwareEPSS 5.1%via NVD

CVE-2025-9584Medium· 6.3

1y ago

A vulnerability was found in Comfast CF-N1 2.6.0

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack …

▾ Sunlitcomfast · cf-n1_firmwareEPSS 8.3%via NVD

CVE-2025-9583Medium· 6.3

1y ago

A vulnerability has been found in Comfast CF-N1 2.6.0

A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. T…

▾ Sunlitcomfast · cf-n1_firmwareEPSS 5.1%via NVD

CVE-2025-9582Medium· 6.3

1y ago

A flaw has been found in Comfast CF-N1 2.6.0

A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The expl…

▾ Sunlitcomfast · cf-n1_firmwareEPSS 5.3%via NVD

CVE-2025-9581Medium· 6.3

1y ago

A vulnerability was detected in Comfast CF-N1 2.6.0

A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remo…

▾ Sunlitcomfast · cf-n1_firmwareEPSS 5.3%via NVD

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1

A vulnerability was identified in Comfast CF-N1 2.6.0

A vulnerability was determined in Comfast CF-N1 2.6.0

A vulnerability was found in Comfast CF-N1 2.6.0

A vulnerability has been found in Comfast CF-N1 2.6.0

A flaw has been found in Comfast CF-N1 2.6.0

A vulnerability was detected in Comfast CF-N1 2.6.0

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1

A vulnerability was identified in Comfast CF-N1 2.6.0

A vulnerability was determined in Comfast CF-N1 2.6.0

A vulnerability was found in Comfast CF-N1 2.6.0

A vulnerability has been found in Comfast CF-N1 2.6.0

A flaw has been found in Comfast CF-N1 2.6.0

A vulnerability was detected in Comfast CF-N1 2.6.0

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live