Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

30464

Tracked CVEs

2987

Critical

380

Exploited in wild

4938

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page874
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

12 matches

CVE-2026-44517Medium· 6.3

3mo ago

Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

▾ Sunlitcontainers · github.com/containers/buildahEPSS 0.18%via GHSA

CVE-2026-55686Medium· 5.3

3mo ago

Podman: WORKDIR symlink traversal vulnerability

▾ Sunlitcontainers · github.com/containers/podman/v5EPSS 0.37%via GHSA

CVE-2025-6032High· 8.3

1y ago

A flaw was found in Podman

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

▾ Twilightcontainers · github.com/containers/podman/v4EPSS 0.48%via NVD

CVE-2024-11218High· 8.6

1y ago

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it …

▾ Twilightcontainers · github.com/containers/buildahEPSS 0.36%via NVD

CVE-2024-9341Medium· 5.4

1y ago

A flaw was found in Go

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic …

▾ Sunlitcontainers · commonEPSS 1.0%via NVD

CVE-2024-8418High· 7.5

2y ago

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to b…

▾ Twilightcontainers · aardvark-dnsEPSS 0.77%via NVD

CVE-2024-3727High· 8.3

2y ago

A flaw was found in the github.com/containers/image library

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

▾ Twilightcontainers · github.com/containers/imageEPSS 1.3%via NVD

CVE-2024-1753High· 8.6

2y ago

Buildah processes using chroot isolation may leak environment values to intermediate processes

▾ Sunlitcontainers · github.com/containers/buildahEPSS 0.33%via OSV

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

Podman: WORKDIR symlink traversal vulnerability

A flaw was found in Podman

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile

A flaw was found in Go

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries

A flaw was found in the github.com/containers/image library

Podman affected by CVE-2024-1753 container escape at build time

Podman publishes a malicious image to public registries

Podman's default inheritable capabilities for linux container not empty

Non-empty default inheritable capabilities for linux container in Buildah

Buildah processes using chroot isolation may leak environment values to intermediate processes

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

Podman: WORKDIR symlink traversal vulnerability

A flaw was found in Podman

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile

A flaw was found in Go

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries

A flaw was found in the github.com/containers/image library

Podman affected by CVE-2024-1753 container escape at build time

Podman publishes a malicious image to public registries

Podman's default inheritable capabilities for linux container not empty

Non-empty default inheritable capabilities for linux container in Buildah

Buildah processes using chroot isolation may leak environment values to intermediate processes

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live