Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

34604

Tracked CVEs

3378

Critical

421

Exploited in wild

4702

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page883
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code374
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

13 matches

CVE-2025-53837Critical· 9.9

1w ago

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile o…

▾ Midnightxwiki · xwiki-renderingEPSS 0.64%via NVD

CVE-2026-53966High· 7.1

1w ago

XWiki Platform is a generic wiki platform

XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API allows a user who can edit a page to change that page's rights without executing the normal document…

▾ Twilightxwiki · xwiki-platformEPSS 0.77%via NVD

CVE-2026-34151High· 8.2

1w ago

XWiki Platform is a generic wiki platform

XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn.xwiki.web.SkinAction can resolve double-encoded parent-directory segments outside the intended skin or web-application resource prefix w…

▾ Twilightxwiki · xwiki-platformEPSS 1.1%via NVD

CVE-2023-37465Medium· 6.5

2mo ago

org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages

▾ Sunlitxwiki · org.xwiki.contrib:discussions-servervia GHSA

CVE-2026-44179Critical· 9.9

3mo ago

xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro

▾ Midnightxwiki · com.xwiki.pro:xwiki-pro-macrosvia GHSA

CVE-2026-33229Critical· 9.8PoC

5mo ago

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly protected scripting API allows any user with script right to bypass the sandboxing of the…

▾ Abyssalxwiki · xwikiEPSS 1.2%via NVD

CVE-2025-66024Critical· 9.0PoC

6mo ago

The XWiki blog application allows users of the XWiki platform to create and manage blog posts

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions starting with 9.15 and prior to 9.15.7 are vulnerable to Stored Cross-Site Scripting (XSS) via the Blog Post Title. The vulnerability…

▾ Abyssalxwiki · blog_applicationEPSS 0.36%via NVD

CVE-2025-66474High· 8.8

9mo ago

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 …

▾ Twilightxwiki · xwiki-renderingEPSS 1.0%via NVD

CVE-2025-66473High· 7.5

9mo ago

XWiki is an open-source wiki software platform

XWiki is an open-source wiki software platform. Versions 16.10.10 and below, 17.0.0-rc-1 through 17.4.3 and 17.5.0-rc-1 through 17.6.0 contain a REST API which doesn't enforce any limits for the number of items that can be requested in a…

▾ Twilightxwiki · xwikiEPSS 0.40%via NVD

CVE-2025-66472Medium· 6.1PoC

9mo ago

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and 17.0.0-rc-1 through 17.4.1 of both XWiki Platform Flamingo Skin Resources and XWiki Pl…

▾ Twilightxwiki · xwikiEPSS 0.51%via NVD

CVE-2025-65036High· 8.3

9mo ago

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote co…

▾ Twilightxwiki · pro_macrosEPSS 0.40%via NVD

CVE-2025-55749High· 7.5PoC

9mo ago

XWiki is an open-source wiki software platform

XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder.…

▾ Midnightxwiki · xwikiEPSS 1.5%via NVD

CVE-2025-58049Medium· 5.8

1y ago

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, and 17.0.0-rc-1 to before 17.4.0-rc-1, the PDF export jobs …

▾ Sunlitxwiki · xwikiEPSS 0.36%via NVD

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)

XWiki Platform is a generic wiki platform

XWiki Platform is a generic wiki platform

org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages

xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

The XWiki blog application allows users of the XWiki platform to create and manage blog posts

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)

XWiki is an open-source wiki software platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence

XWiki is an open-source wiki software platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)

XWiki Platform is a generic wiki platform

XWiki Platform is a generic wiki platform

org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages

xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

The XWiki blog application allows users of the XWiki platform to create and manage blog posts

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)

XWiki is an open-source wiki software platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence

XWiki is an open-source wiki software platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live