Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

60436

Tracked CVEs

5679

Critical

567

Exploited in wild

12948

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-88771Critical· 9.8Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 1…479

This week's digest →All digests

Feed

5 matches

CVE-2026-77630High· 7.5

yesterday

pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing

pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c synchronously calls getaddrinfo while parse_uri is processing attacker-supplied hostnames fro…

▾ Twilightpupnp · pupnpvia CVEORG

CVE-2026-57486High· 7.5PoC

yesterday

pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespac…

▾ Midnightpupnp · pupnpvia CVEORG

CVE-2026-57487High· 7.5

yesterday

libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/genlib/net/http/httpparser.c to leave parser->content_length at zero while parse…

▾ Twilightpupnp · pupnpvia CVEORG

CVE-2026-57488High· 7.1PoC

yesterday

pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the …

▾ Midnightpupnp · pupnpvia CVEORG

CVE-2026-55862Medium· 6.5PoC

yesterday

pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but i…

▾ Twilightpupnp · pupnpvia CVEORG

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing

pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes

libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered

pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling

pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing

pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes

libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered

pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling

pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live