Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

34604

Tracked CVEs

3378

Critical

421

Exploited in wild

4702

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page883
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code374
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

14 matches

CVE-2026-52727High· 7.2

1w ago

lxc-ci contains continuous integration and image-build scripts for LXC

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg…

▾ Twilightlxc · lxc-ciEPSS 0.59%via NVD

CVE-2026-55621High· 7.7

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of a project that they don't have access to and the name of …

▾ Twilightlxc · github.com/lxc/incus/v7EPSS 0.34%via NVD

CVE-2026-55622High· 7.7

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an in…

▾ Twilightlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.34%via NVD

CVE-2026-47753Medium

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateInstanceFromBackup` in `internal/server/storage/backend.go` contains a nil-pointer dereference that an authenticated user with permission …

▾ Sunlitlxc · github.com/lxc/incus/v7EPSS 0.15%via NVD

CVE-2026-48749Critical· 9.9

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fi…

▾ Midnightlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.73%via NVD

CVE-2026-48750Critical· 9.9

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/instances/$name/exec` endpoint stores the output of the command in the `exec-output` directory of the instance. If `e…

▾ Midnightlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.73%via NVD

CVE-2026-48751Critical· 9.9

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlev…

▾ Midnightlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.64%via NVD

CVE-2026-48752Critical· 9.9

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command executio…

▾ Midnightlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.73%via NVD

CVE-2026-48753Critical· 9.9

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could lead to arbitrary co…

▾ Midnightlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.73%via NVD

CVE-2026-48754Low

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).createDependentVolumesFromBackup` in `internal/server/storage/backend.go` contains a cluster of unguarded pointer derefs on every dependent-volu…

▾ Sunlitlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.38%via NVD

CVE-2026-48755Critical· 9.9

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This leads to an arbitrary fi…

▾ Midnightlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.73%via NVD

CVE-2026-48756Low

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateCustomVolumeFromBackup` in `internal/server/storage/backend.go` contains an unguarded `*time.Time` dereference on the `ExpiresAt` field of…

▾ Sunlitlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.38%via NVD

CVE-2026-48769Critical· 9.9

1mo ago

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted `Incus-Image-Hash` header. This can lead to arbitrary com…

▾ Midnightlxc · github.com/lxc/incus/v7/cmd/incusdEPSS 0.73%via NVD

CVE-2025-54287Medium· 6.5

11mo ago

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

▾ Sunlitlxc · github.com/lxc/lxdEPSS 0.37%via OSV

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

lxc-ci contains continuous integration and image-build scripts for LXC

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

lxc-ci contains continuous integration and image-build scripts for LXC

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Incus is a system container and virtual machine manager

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live