Severe
Mass exploitation or critical 0-day in the wild. Treat as incident.- CISA KEV Catalogjust now
- NVD CVE 2.01 d agoerr
- GitHub Security Advisoriesjust now
- OSV.dev124 d agoerr
- Microsoft MSRC125 d agoerr
- CISA ICS-CERT advisories4 h ago
- CISA Cybersecurity Advisoriesjust now
- abuse.ch URLhaus124 d agoerr
- abuse.ch ThreatFox10 d agoerr
- Nuclei templatesjust now
Zero-day attacks · live
All recent CISA KEV additions, ransomware-linked CVEs, supply-chain attacks, and vendor zero-day disclosures.
Severity mix
1,000 CVEs · 30 d- critical0
- high0
- medium217
- low783
Top vendors
advisories · 7 dcurl/libcurl: SASL buffer overflow
curl/libcurl: Arbitrary File Access
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell commands behind an allowlist (`SandboxPolicy.isCommandAllowed`), which THREAT_MODEL.md calls the main control against a compr
Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta.51, Avo's association attach workflow checks attach_<association>? in the UI and GET /resources/:resource/:id/:related/new path, but the actual
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
ALAS2NGINX1-2026-017 (medium): nginx
CVE-2026-15176 · CVE-2026-93479 · CVE-2026-95101 · CVE-2026-97205 +1
ALAS2DOCKER-2026-148 (important): soci-snapshotter
CVE-2026-78659 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-94439 +3
ALAS2DOCKER-2026-149 (important): amazon-ecr-credential-helper
CVE-2026-78659 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-94439 +3
ALAS2DOCKER-2026-150 (important): oci-add-hooks
CVE-2026-78659 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-94439 +3
ALAS2DOCKER-2026-151 (important): runfinch-finch
CVE-2026-78659 · CVE-2026-93316 · CVE-2026-93317 · CVE-2026-93318 +4
ALAS2DOCKER-2026-152 (important): docker
CVE-2026-17106 · CVE-2026-78659 · CVE-2026-78667 · CVE-2026-92542 +3
ALAS2DOCKER-2026-153 (important): containerd
CVE-2026-53493 · CVE-2026-56855 · CVE-2026-61801 · CVE-2026-78659 +4
ALAS2DOCKER-2026-154 (medium): runc
CVE-2026-111943 · CVE-2026-61801
aka PCPCat, ShellForce, DeadCatx3, SHADOW-WATER-058 +1
aka UNC6240, Bling Libra
aka Storm-2697, GOLD SHERWOOD
aka UNC1549, TA455, COBALT SMOKEY
aka NICKEL GLADSTONE, BeagleBoyz, Bluenoroff, Stardust Chollima +2
How LLM-Based Penetration Testing Harnesses Work
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
CVE-2026-111497
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
Full source release: autonomous root chain for TCL 50C721 Android TV via CVE-2022-22706 (Mali GPU page-cache write)
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
We used RCE on 3 million PCs to prevent a botnet