Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

30464

Tracked CVEs

2987

Critical

380

Exploited in wild

4938

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page874
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

124 matches

CVE-2026-59714High· 7.1

1mo ago

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to (including private and DM ch…

Sound the depths of every vulnerability.

Trending now

Feed

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform

Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching

Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)

Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

Open WebUI: Arena task endpoints can bypass underlying model access controls

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

Open WebUI: Stored web worker XSS via Pyodide

Open WebUI: Account enumeration via observable login timing discrepancy

Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation

Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config

Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout

Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

Open WebUI allows limited stored XSS vila uploaded html file

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Open WebUI vulnerable to Stored XSS via iFrame in citations model

Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages

Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality

Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendar

Open WebUI: Cross-origin postMessage confirmation bypass via action:submit

Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)

Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform

Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching

Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)

Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

Open WebUI: Arena task endpoints can bypass underlying model access controls

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

Open WebUI: Stored web worker XSS via Pyodide

Open WebUI: Account enumeration via observable login timing discrepancy

Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation

Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config

Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout

Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

Open WebUI allows limited stored XSS vila uploaded html file

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Open WebUI vulnerable to Stored XSS via iFrame in citations model

Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages

Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality

Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendar

Open WebUI: Cross-origin postMessage confirmation bypass via action:submit

Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)

Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live