Skip to content
Fencer Intel

live: new CVEs every 10 minutes, KEV hourly

Every vulnerability. One feed.

The CVE List, GitHub advisories, OSV, NVD, ENISA EUVD and distro advisories merged into one entry per vulnerability, flagged with what attackers actually use: CISA KEV, EPSS and public exploits.

Open the critical feed Check a lockfile

414 new in the last 24 hours, 58 critical in 7 days, 36 added to CISA KEV in 30 days.

vulnerabilities published per utc day, by severity 9 weeks
kev 72 critical 2,882 high 13,057 medium 12,621 low 1,599 unscored 2,128 Sep 13: 6 critical, 51 high, 68 medium, 27 low, 1 unscored Sep 14: 53 critical, 214 high, 357 medium, 66 low, 1 unscored; 1 added to CISA KEV Sep 15: 176 critical, 757 high, 285 medium, 35 low, 0 unscored Sep 16: 105 critical, 387 high, 240 medium, 27 low, 126 unscored; 3 added to CISA KEV Sep 17: 62 critical, 291 high, 112 medium, 24 low, 434 unscored Sep 18: 43 critical, 188 high, 220 medium, 33 low, 0 unscored; 3 added to CISA KEV Sep 19: 7 critical, 28 high, 64 medium, 6 low, 0 unscored Sep 20: 14 critical, 35 high, 53 medium, 15 low, 2 unscored Sep 21: 17 critical, 87 high, 99 medium, 14 low, 3 unscored; 1 added to CISA KEV Sep 22: 84 critical, 168 high, 188 medium, 12 low, 4 unscored; 4 added to CISA KEV Sep 23: 38 critical, 210 high, 238 medium, 37 low, 2 unscored Sep 24: 33 critical, 178 high, 129 medium, 16 low, 174 unscored; 2 added to CISA KEV Sep 25: 23 critical, 163 high, 191 medium, 11 low, 228 unscored; 3 added to CISA KEV Sep 26: 8 critical, 24 high, 28 medium, 5 low, 1 unscored Sep 27: 10 critical, 33 high, 77 medium, 26 low, 1 unscored; 2 added to CISA KEV Sep 28: 38 critical, 119 high, 196 medium, 20 low, 1 unscored Sep 29: 97 critical, 243 high, 254 medium, 41 low, 1 unscored; 1 added to CISA KEV Sep 30: 64 critical, 328 high, 268 medium, 27 low, 3 unscored; 1 added to CISA KEV Oct 1: 44 critical, 138 high, 149 medium, 20 low, 1 unscored; 1 added to CISA KEV Oct 2: 43 critical, 179 high, 167 medium, 13 low, 1 unscored; 2 added to CISA KEV Oct 3: 5 critical, 51 high, 71 medium, 7 low, 0 unscored Oct 4: 6 critical, 33 high, 26 medium, 7 low, 0 unscored; 1 added to CISA KEV Oct 5: 23 critical, 145 high, 188 medium, 22 low, 1 unscored Oct 6: 89 critical, 365 high, 360 medium, 33 low, 156 unscored Oct 7: 55 critical, 124 high, 181 medium, 12 low, 2 unscored Oct 8: 53 critical, 170 high, 229 medium, 25 low, 0 unscored; 5 added to CISA KEV Oct 9: 32 critical, 158 high, 130 medium, 16 low, 6 unscored Oct 10: 76 critical, 143 high, 197 medium, 29 low, 1 unscored Oct 11: 17 critical, 68 high, 153 medium, 16 low, 0 unscored Oct 12: 40 critical, 178 high, 239 medium, 25 low, 0 unscored Oct 13: 152 critical, 1337 high, 700 medium, 27 low, 1 unscored; 2 added to CISA KEV Oct 14: 59 critical, 258 high, 296 medium, 40 low, 43 unscored; 4 added to CISA KEV Oct 15: 41 critical, 199 high, 263 medium, 14 low, 0 unscored; 1 added to CISA KEV Oct 16: 39 critical, 147 high, 222 medium, 25 low, 20 unscored; 2 added to CISA KEV Oct 17: 8 critical, 54 high, 63 medium, 14 low, 0 unscored Oct 18: 9 critical, 61 high, 78 medium, 11 low, 400 unscored Oct 19: 23 critical, 125 high, 264 medium, 39 low, 1 unscored Oct 20: 171 critical, 804 high, 782 medium, 107 low, 0 unscored; 6 added to CISA KEV Oct 21: 54 critical, 199 high, 206 medium, 26 low, 0 unscored Oct 22: 63 critical, 150 high, 187 medium, 29 low, 3 unscored Oct 23: 34 critical, 138 high, 66 medium, 16 low, 170 unscored; 2 added to CISA KEV Oct 24: 11 critical, 27 high, 40 medium, 4 low, 2 unscored Oct 25: 2 critical, 19 high, 37 medium, 10 low, 0 unscored Oct 26: 40 critical, 271 high, 400 medium, 66 low, 13 unscored; 2 added to CISA KEV Oct 27: 89 critical, 304 high, 207 medium, 28 low, 1 unscored; 2 added to CISA KEV Oct 28: 40 critical, 254 high, 289 medium, 46 low, 89 unscored; 2 added to CISA KEV Oct 29: 86 critical, 188 high, 235 medium, 23 low, 0 unscored; 2 added to CISA KEV Oct 30: 35 critical, 171 high, 227 medium, 18 low, 2 unscored; 2 added to CISA KEV Oct 31: 13 critical, 51 high, 63 medium, 17 low, 0 unscored Nov 1: 26 critical, 28 high, 64 medium, 12 low, 0 unscored Nov 2: 35 critical, 203 high, 212 medium, 17 low, 18 unscored Nov 3: 69 critical, 270 high, 342 medium, 38 low, 17 unscored; 1 added to CISA KEV Nov 4: 33 critical, 143 high, 155 medium, 37 low, 23 unscored; 1 added to CISA KEV Nov 5: 35 critical, 121 high, 125 medium, 13 low, 6 unscored Nov 6: 35 critical, 125 high, 193 medium, 39 low, 13 unscored; 1 added to CISA KEV Nov 7: 69 critical, 160 high, 232 medium, 10 low, 12 unscored Nov 8: 10 critical, 34 high, 90 medium, 13 low, 0 unscored Nov 9: 35 critical, 168 high, 229 medium, 49 low, 5 unscored; 4 added to CISA KEV Nov 10: 103 critical, 1188 high, 631 medium, 54 low, 55 unscored; 6 added to CISA KEV Nov 11: 42 critical, 258 high, 234 medium, 47 low, 54 unscored Nov 12: 23 critical, 185 high, 128 medium, 27 low, 6 unscored Nov 13: 36 critical, 160 high, 204 medium, 16 low, 7 unscored; 2 added to CISA KEV Nov 14: 1 critical, 1 high, 0 medium, 0 low, 17 unscored Sep 19 Oct 3 Oct 17 Oct 31 today
Vulnerabilities published per UTC day for the last 63 days by severity, 32,287 in all, and 72 added to CISA KEV.

Just added to CISA KEV

CISA confirms these are being exploited in the wild. Federal agencies get a deadline to patch; you should treat them the same way.

all known exploited
  1. 7.8
     CVE-2026-123039 Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket
  2. 8.6
     CVE-2026-114713 The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies,…
  3. 7.5
     CVE-2026-20320 A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read s…
  4. 8.8
     CVE-2026-125350 Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
  5. 6.5
     CVE-2026-124194 Microsoft Outlook Spoofing Vulnerability
  6. 9.8
     CVE-2026-116606 Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway

Plug it into anything

The same entries as a feed, a JSON API, an MCP server and a lockfile check. No account and no API key.

~ fencer-intel
$ curl -s "https://intel.fencer.dev/feed?filter=critical" 
<rss version="2.0">
  <channel><title>Fencer Intel — Critical</title>
    <item>
      <title>CVE-2026-123039: Local privilege escalation to root in the Dyn...</title>
      <link>https://intel.fencer.dev/CVE-2026-123039</link>
$ curl -s https://intel.fencer.dev/api/v1/entries/CVE-2026-123039 
{
  "id": "CVE-2026-123039",
  "title": "Local privilege escalation to root in the DynamicCLI daem...",
  "severity": "high",
  "cvss": {
    "score": 7.8,
    "version": "3.1"
  },
  "kev": {
    "added": "2026-11-13"
  },
  "epss": {
    "score": 0.0127
  },
  "exploits": []
}
$ claude mcp add --transport http fencer-intel https://intel.fencer.dev/mcp 
# tools: search, get_vulnerability, list_feed, check_stack
# your agent checks a package before it installs it
$ curl -s -F lockfile=@package-lock.json https://intel.fencer.dev/api/v1/stack 
# every advisory for the versions you pin, exploited first
# the report has its own feed for new matches

All · nuget

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    GHSA-6856-87hx-p5x7 Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability
    nuget
  2. 9.1
    CVE-2026-118740 Aspire Security Feature Bypass Vulnerability
    nuget
  3. 5.3
    CVE-2026-120796 .NET Denial of Service Vulnerability
    nuget
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  4. 7.3
    CVE-2026-120778 Aspire Elevation of Privilege Vulnerability
    nugetnpm
  5. 7.3
    CVE-2026-120792 Aspire Information Disclosure Vulnerability
    nugetnpm
  6. 7.5
    CVE-2026-118750 ASP.NET Core Denial of Service Vulnerability
    nuget
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  7. 7.5
    CVE-2026-118749 ASP.NET Core Denial of Service Vulnerability
    nuget
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  8. 7.5
    CVE-2026-118748 ASP.NET Core Denial of Service Vulnerability
    nuget
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  9. 7.5
    CVE-2026-118747 .NET Denial of Service Vulnerability
    nuget
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  10. 8.8
    CVE-2026-118745 Visual Studio Remote Code Execution Vulnerability
    nuget
  11. 7.5
    CVE-2026-120006 Aspire Elevation of Privilege Vulnerability
    nuget
  12. 8.8
    CVE-2026-114159 Visual Studio Remote Code Execution Vulnerability
    nuget
  13. 8.8
    CVE-2026-114158 Visual Studio Remote Code Execution Vulnerability
    nuget
  14. 7.5
    CVE-2026-114157 ASP.NET Core Security Feature Bypass Vulnerability
    nuget
  15. 6.5
    CVE-2026-114156 ASP.NET Core Security Feature Bypass Vulnerability
    nuget
  16. 7.5
    CVE-2026-114155 .NET Elevation of Privilege Vulnerability
    nuget
  17. 7.5
    CVE-2026-114154 ASP.NET Core Denial of Service Vulnerability
    nuget
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  18. 8.8
    CVE-2026-114152 Visual Studio Remote Code Execution Vulnerability
    nuget
  19. 8.8
    CVE-2026-114151 Visual Studio Remote Code Execution Vulnerability
    nuget
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  20. 5.9
    CVE-2026-114150 ASP.NET Core Information Disclosure Vulnerability
    nuget
  21. 7.5
    CVE-2026-114149 ASP.NET Core Denial of Service Vulnerability
    nuget
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  22. 7.5
    CVE-2026-114147 ASP.NET Core Denial of Service Vulnerability
    nuget
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  23. 9.0
    CVE-2026-114146 ASP.NET Core Elevation of Privilege Vulnerability
    nuget
  24. 7.5
    CVE-2026-109481 ASP.NET Core Elevation of Privilege Vulnerability
    nuget
  25. 7.5
    CVE-2026-109478 ASP.NET Core Denial of Service Vulnerability
    nuget
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  26. 6.1
    CVE-2026-109476 ASP.NET Core Information Disclosure Vulnerability
    nuget
  27. 7.5
    CVE-2026-109475 .NET Denial of Service Vulnerability
    nuget
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  28. 7.5
    CVE-2026-128081 AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth
    nuget
  29. 7.5
    CVE-2026-128082 AutoMapper: Uncontrolled Recursion with Constructor Parameters
    nuget
  30. 8.1
    GHSA-p3jp-9v83-76w9 Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability
    nuget