Skip to content
Fencer Intel

live: new CVEs every 10 minutes, KEV hourly

Every vulnerability. One feed.

The CVE List, GitHub advisories, OSV, NVD, ENISA EUVD and distro advisories merged into one entry per vulnerability, flagged with what attackers actually use: CISA KEV, EPSS and public exploits.

Open the critical feed Check a lockfile

448 new in the last 24 hours, 41 critical in 7 days, 33 added to CISA KEV in 30 days.

vulnerabilities published per day, by severity 9 weeks
kev 77 critical 3,116 high 13,440 medium 13,059 low 1,597 unscored 2,243 Sep 8: 92 critical, 929 high, 514 medium, 33 low, 1 unscored; 4 added to CISA KEV Sep 9: 56 critical, 197 high, 354 medium, 49 low, 12 unscored; 4 added to CISA KEV Sep 10: 56 critical, 189 high, 136 medium, 6 low, 0 unscored; 2 added to CISA KEV Sep 11: 102 critical, 294 high, 137 medium, 12 low, 152 unscored; 4 added to CISA KEV Sep 12: 12 critical, 26 high, 52 medium, 4 low, 1 unscored Sep 13: 3 critical, 44 high, 58 medium, 27 low, 1 unscored Sep 14: 53 critical, 204 high, 357 medium, 65 low, 1 unscored; 1 added to CISA KEV Sep 15: 176 critical, 778 high, 302 medium, 36 low, 0 unscored Sep 16: 104 critical, 371 high, 241 medium, 26 low, 126 unscored; 3 added to CISA KEV Sep 17: 76 critical, 336 high, 142 medium, 26 low, 434 unscored Sep 18: 50 critical, 211 high, 222 medium, 45 low, 0 unscored; 3 added to CISA KEV Sep 19: 8 critical, 23 high, 64 medium, 9 low, 0 unscored Sep 20: 12 critical, 30 high, 48 medium, 15 low, 2 unscored Sep 21: 24 critical, 114 high, 128 medium, 18 low, 3 unscored; 1 added to CISA KEV Sep 22: 84 critical, 177 high, 181 medium, 15 low, 4 unscored; 4 added to CISA KEV Sep 23: 42 critical, 202 high, 228 medium, 33 low, 2 unscored Sep 24: 32 critical, 191 high, 157 medium, 17 low, 174 unscored; 2 added to CISA KEV Sep 25: 22 critical, 188 high, 216 medium, 14 low, 231 unscored; 3 added to CISA KEV Sep 26: 11 critical, 109 high, 113 medium, 11 low, 1 unscored Sep 27: 12 critical, 40 high, 56 medium, 12 low, 1 unscored; 2 added to CISA KEV Sep 28: 43 critical, 105 high, 149 medium, 16 low, 1 unscored Sep 29: 97 critical, 249 high, 232 medium, 41 low, 1 unscored; 1 added to CISA KEV Sep 30: 66 critical, 310 high, 247 medium, 26 low, 0 unscored; 1 added to CISA KEV Oct 1: 53 critical, 165 high, 159 medium, 18 low, 1 unscored; 1 added to CISA KEV Oct 2: 42 critical, 191 high, 174 medium, 10 low, 1 unscored; 2 added to CISA KEV Oct 3: 5 critical, 42 high, 60 medium, 7 low, 0 unscored Oct 4: 6 critical, 29 high, 22 medium, 6 low, 0 unscored; 1 added to CISA KEV Oct 5: 29 critical, 159 high, 207 medium, 22 low, 1 unscored Oct 6: 98 critical, 379 high, 357 medium, 32 low, 156 unscored Oct 7: 52 critical, 117 high, 174 medium, 11 low, 2 unscored Oct 8: 53 critical, 177 high, 245 medium, 25 low, 0 unscored; 5 added to CISA KEV Oct 9: 37 critical, 149 high, 114 medium, 18 low, 6 unscored Oct 10: 77 critical, 136 high, 189 medium, 10 low, 0 unscored Oct 11: 17 critical, 62 high, 141 medium, 14 low, 0 unscored Oct 12: 41 critical, 213 high, 371 medium, 47 low, 0 unscored Oct 13: 163 critical, 1357 high, 731 medium, 27 low, 1 unscored; 2 added to CISA KEV Oct 14: 73 critical, 324 high, 365 medium, 40 low, 43 unscored; 4 added to CISA KEV Oct 15: 44 critical, 206 high, 281 medium, 15 low, 0 unscored; 1 added to CISA KEV Oct 16: 44 critical, 162 high, 228 medium, 20 low, 20 unscored; 2 added to CISA KEV Oct 17: 3 critical, 29 high, 53 medium, 5 low, 0 unscored Oct 18: 9 critical, 58 high, 76 medium, 9 low, 400 unscored Oct 19: 31 critical, 148 high, 240 medium, 33 low, 0 unscored Oct 20: 172 critical, 815 high, 831 medium, 117 low, 0 unscored; 6 added to CISA KEV Oct 21: 50 critical, 211 high, 249 medium, 39 low, 1 unscored Oct 22: 62 critical, 159 high, 152 medium, 29 low, 3 unscored Oct 23: 37 critical, 159 high, 102 medium, 24 low, 170 unscored; 2 added to CISA KEV Oct 24: 11 critical, 23 high, 35 medium, 5 low, 2 unscored Oct 25: 3 critical, 32 high, 67 medium, 31 low, 0 unscored Oct 26: 38 critical, 252 high, 404 medium, 56 low, 14 unscored; 2 added to CISA KEV Oct 27: 88 critical, 303 high, 207 medium, 26 low, 0 unscored; 2 added to CISA KEV Oct 28: 39 critical, 239 high, 262 medium, 35 low, 89 unscored; 2 added to CISA KEV Oct 29: 85 critical, 200 high, 232 medium, 28 low, 2 unscored; 2 added to CISA KEV Oct 30: 50 critical, 224 high, 272 medium, 27 low, 4 unscored; 2 added to CISA KEV Oct 31: 13 critical, 45 high, 54 medium, 1 low, 0 unscored Nov 1: 26 critical, 17 high, 48 medium, 11 low, 0 unscored Nov 2: 35 critical, 211 high, 193 medium, 16 low, 18 unscored Nov 3: 67 critical, 280 high, 344 medium, 38 low, 44 unscored; 1 added to CISA KEV Nov 4: 42 critical, 155 high, 157 medium, 34 low, 28 unscored; 1 added to CISA KEV Nov 5: 39 critical, 184 high, 142 medium, 22 low, 44 unscored Nov 6: 41 critical, 137 high, 217 medium, 44 low, 20 unscored; 1 added to CISA KEV Nov 7: 67 critical, 149 high, 231 medium, 10 low, 16 unscored Nov 8: 20 critical, 85 high, 169 medium, 28 low, 0 unscored Nov 9: 21 critical, 140 high, 170 medium, 51 low, 9 unscored; 3 added to CISA KEV Sep 14 Sep 28 Oct 12 Oct 26 today
Vulnerabilities published per day for the last 63 days by severity, 33,455 in all, and 77 added to CISA KEV.

Just added to CISA KEV

CISA confirms these are being exploited in the wild. Federal agencies get a deadline to patch; you should treat them the same way.

all known exploited
  1. 8.1
     CVE-2026-123158 sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (relate…
  2. 9.8
     CVE-2026-116779 FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
  3. 9.8
     CVE-2026-102895 GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
  4. 7.5
     CVE-2026-19868 An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authenticati…
  5. 5.5
     CVE-2024-27834 The issue was addressed with improved checks.
  6. 8.1
     CVE-2026-119977 WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution

Plug it into anything

The same entries as a feed, a JSON API, an MCP server and a lockfile check. No account and no API key.

~ fencer-intel
$ curl -s "https://intel.fencer.dev/feed?filter=critical" 
<rss version="2.0">
  <channel><title>Fencer Intel — Critical</title>
    <item>
      <title>CVE-2026-123158: sshd in OpenSSH before 10.6p2 on Linux, when ...</title>
      <link>https://intel.fencer.dev/CVE-2026-123158</link>
$ curl -s https://intel.fencer.dev/api/v1/entries/CVE-2026-123158 
{
  "id": "CVE-2026-123158",
  "title": "sshd in OpenSSH before 10.6p2 on Linux, when musl libc is...",
  "severity": "high",
  "cvss": {
    "score": 8.1,
    "version": "3.1"
  },
  "kev": {
    "added": "2026-11-09"
  },
  "epss": {
    "score": 0.0101
  },
  "exploits": []
}
$ claude mcp add --transport http fencer-intel https://intel.fencer.dev/mcp 
# tools: search, get_vulnerability, list_feed, check_stack
# your agent checks a package before it installs it
$ curl -s -F lockfile=@package-lock.json https://intel.fencer.dev/api/v1/stack 
# every advisory for the versions you pin, exploited first
# the report has its own feed for new matches

All · Apache HTTP Server

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2026-63686 Apache HTTP Server: mod_xml2enc crash on charset conversion failure
    Apache HTTP Serverbitnami
  2. 8.8
    CVE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow
    Apache HTTP Serverbitnami
  3. 5.3
    CVE-2026-79768 Apache HTTP Server: mod_userdir information disclosure
    Apache HTTP Serverbitnami
  4. 7.3
    CVE-2026-73637 Apache HTTP Server: mod_auth_digest DoS attack
    Apache HTTP Serverbitnami
  5. 8.1
    CVE-2026-73636 Apache HTTP Server: mod_auth_digest one-time-nonce replay attack
    Apache HTTP Serverbitnami
  6. 7.5
    CVE-2026-63718 Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling
    Apache HTTP Serverbitnami
  7. 7.5
    CVE-2026-63292 Apache HTTP Server: mod_vhost_alias stack overflow
    Apache HTTP Serverbitnami
  8. 7.5
    CVE-2026-63045 Apache HTTP Server: mod_proxy_ftp PASV address handling
    Apache HTTP Serverbitnami
  9. 9.8
    CVE-2026-59797 Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
    Apache HTTP Serverbitnami
  10. 7.5
    CVE-2026-59685 Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM
    Apache HTTP Serverbitnami
  11. 5.3
    CVE-2026-58415 Apache HTTP Server: mod_dav_fs property database read access
    Apache HTTP Serverbitnami
  12. 9.8
    CVE-2026-57941 Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy
    Apache HTTP Serverbitnami
  13. 7.5
    CVE-2026-56449 Apache HTTP Server: mod_proxy_html: crash in dump_content
    Apache HTTP Serverbitnami
  14. 9.8
    CVE-2026-56154 Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}
    Apache HTTP Serverbitnami
  15. 7.5
    CVE-2026-56153 Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char
    Apache HTTP Serverbitnami
  16. 7.5
    CVE-2026-48005 Apache HTTP Server: mod_auth_digest reauthentication attack
    Apache HTTP Serverbitnami
  17. 7.5
    CVE-2026-47360 Apache HTTP Server: mod_session: Session cookie not removed during internal redirect
    Apache HTTP Serverbitnami
  18. 7.5
    CVE-2026-46729 Apache HTTP Server: mod_heartmonitor denial of service
    Apache HTTP Serverbitnami
  19. 3.7
    CVE-2026-42356 Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories
    Apache HTTP Serverbitnami
  20. 4.3
    CVE-2026-42528 Apache HTTP Server: mod_dav shared lock overflow
    Apache HTTP Serverbitnami
  21. 7.5
    CVE-2026-49975 Apache HTTP Server: mod_http2 denial of service
    Apache HTTP Serverbitnami
    EPSS 33.0% chance of exploitation in 30 days, percentile 98%
  22. 7.3
    CVE-2026-48913 Apache HTTP Server: mod_http2 memory corruption when file handles exhausted
    Apache HTTP Serverbitnami
  23. 7.5
    CVE-2026-42536 Apache HTTP Server: mod_xml2enc heap overflow
    Apache HTTP Serverbitnami
    EPSS 1.0% chance of exploitation in 30 days, percentile 63%
  24. 7.3
    CVE-2026-44185 Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
    Apache HTTP Serverbitnami
  25. 7.5
    CVE-2026-34355 Apache HTTP Server: mod_proxy_html buffer overflow
    Apache HTTP Serverbitnami
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  26. 9.8
    CVE-2026-44631 Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow
    Apache HTTP Serverbitnami
  27. 5.5
    CVE-2026-44119 Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules
    Apache HTTP Serverbitnami
  28. 6.5
    CVE-2026-43951 Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash
    Apache HTTP Serverbitnami
  29. 9.1
    CVE-2026-42535 Apache HTTP Server: mod_dav_fs protected directory access
    Apache HTTP Serverbitnami
  30. 7.5
    CVE-2026-34356 Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow
    Apache HTTP Serverbitnami