Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

34471

Tracked CVEs

3367

Critical

421

Exploited in wild

4599

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page883
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

16 matches

CVE-2026-12570Medium· 5.5

1mo ago

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() function

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() function. The H5IOStore.__getitem__ method in keras/src/saving…

▾ Sunlitkeras · kerasEPSS 0.13%via NVD

CVE-2026-12484High· 7.8

2mo ago

Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/f…

Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filter_safe_zipinfos()` validate archive …

▾ Twilightkeras · kerasEPSS 0.56%via OSV

CVE-2026-1462High· 7.8

5mo ago

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`. This bypasses the secu…

▾ Twilightkeras · kerasEPSS 0.40%via NVD

CVE-2026-1669High· 7.5

7mo ago

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras …

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras …

▾ Twilightkeras · kerasEPSS 0.31%via NVD

CVE-2026-0897High· 7.5PoC

8mo ago

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a c…

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a c…

▾ Midnightkeras · kerasEPSS 0.34%via NVD

CVE-2025-12060Critical· 9.8

9mo ago

Keras Directory Traversal Vulnerability

▾ Midnightkeras · kerasEPSS 0.59%via OSV

CVE-2025-12058Medium

11mo ago

Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery

▾ Sunlitkeras · kerasEPSS 0.25%via OSV

CVE-2025-9905High

1y ago

The Keras `Model.load_model` method silently ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file i…

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

▾ Twilightkeras · kerasEPSS 0.22%via OSV

CVE-2025-9906High· 7.3

1y ago

Keras is vulnerable to Deserialization of Untrusted Data

▾ Twilightkeras · kerasEPSS 0.20%via OSV

CVE-2025-8747High· 8.8

1y ago

Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

▾ Twilightkeras · kerasEPSS 0.12%via OSV

CVE-2025-1550HighPoC

1y ago

Arbitrary Code Execution via Crafted Keras Config for Model Loading

▾ Midnightkeras · kerasEPSS 2.6%via OSV

CVE-2024-55459Medium

1y ago

keras Path Traversal vulnerability

▾ Sunlitkeras · kerasEPSS 0.23%via OSV

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() function

Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data

Keras: tar extraction permits symlink-based path traversal

Keras: HDF5 virtual datasets can disclose local files

Keras: DiskIOStore permits path traversal through crafted layer names

Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/f…

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras …

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a c…

Keras Directory Traversal Vulnerability

Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file i…

Keras is vulnerable to Deserialization of Untrusted Data

Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

Arbitrary Code Execution via Crafted Keras Config for Model Loading

keras Path Traversal vulnerability

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() function

Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data

Keras: tar extraction permits symlink-based path traversal

Keras: HDF5 virtual datasets can disclose local files

Keras: DiskIOStore permits path traversal through crafted layer names

Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/f…

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras …

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a c…

Keras Directory Traversal Vulnerability

Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file i…

Keras is vulnerable to Deserialization of Untrusted Data

Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

Arbitrary Code Execution via Crafted Keras Config for Model Loading

keras Path Traversal vulnerability

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

The Keras `Model.load_model` method silently ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file i…

The Keras `Model.load_model` method silently ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file i…