Skip to content
Fencer Intel

live: new CVEs every 10 minutes, KEV hourly

Every vulnerability. One feed.

The CVE List, GitHub advisories, OSV, NVD, ENISA EUVD and distro advisories merged into one entry per vulnerability, flagged with what attackers actually use: CISA KEV, EPSS and public exploits.

Open the critical feed Check a lockfile

539 new in the last 24 hours, 43 critical in 7 days, 40 added to CISA KEV in 30 days.

vulnerabilities published per utc day, by severity 9 weeks
kev 74 critical 2,940 high 13,105 medium 12,472 low 1,556 unscored 2,351 Sep 11: 101 critical, 340 high, 184 medium, 14 low, 152 unscored; 4 added to CISA KEV Sep 12: 15 critical, 26 high, 43 medium, 6 low, 1 unscored Sep 13: 6 critical, 51 high, 68 medium, 27 low, 1 unscored Sep 14: 53 critical, 214 high, 357 medium, 66 low, 1 unscored; 1 added to CISA KEV Sep 15: 176 critical, 758 high, 285 medium, 35 low, 0 unscored Sep 16: 105 critical, 387 high, 240 medium, 27 low, 126 unscored; 3 added to CISA KEV Sep 17: 62 critical, 291 high, 112 medium, 24 low, 434 unscored Sep 18: 43 critical, 188 high, 220 medium, 33 low, 0 unscored; 3 added to CISA KEV Sep 19: 7 critical, 28 high, 64 medium, 6 low, 0 unscored Sep 20: 14 critical, 35 high, 53 medium, 15 low, 2 unscored Sep 21: 17 critical, 87 high, 99 medium, 14 low, 3 unscored; 1 added to CISA KEV Sep 22: 84 critical, 168 high, 188 medium, 12 low, 4 unscored; 4 added to CISA KEV Sep 23: 38 critical, 210 high, 238 medium, 37 low, 2 unscored Sep 24: 33 critical, 178 high, 129 medium, 16 low, 174 unscored; 2 added to CISA KEV Sep 25: 23 critical, 163 high, 191 medium, 11 low, 228 unscored; 3 added to CISA KEV Sep 26: 8 critical, 24 high, 28 medium, 5 low, 1 unscored Sep 27: 10 critical, 33 high, 77 medium, 26 low, 1 unscored; 2 added to CISA KEV Sep 28: 38 critical, 119 high, 196 medium, 20 low, 1 unscored Sep 29: 97 critical, 243 high, 254 medium, 41 low, 1 unscored; 1 added to CISA KEV Sep 30: 64 critical, 328 high, 268 medium, 27 low, 0 unscored; 1 added to CISA KEV Oct 1: 44 critical, 138 high, 149 medium, 20 low, 1 unscored; 1 added to CISA KEV Oct 2: 43 critical, 179 high, 167 medium, 13 low, 1 unscored; 2 added to CISA KEV Oct 3: 5 critical, 51 high, 71 medium, 7 low, 0 unscored Oct 4: 6 critical, 26 high, 23 medium, 7 low, 0 unscored; 1 added to CISA KEV Oct 5: 23 critical, 145 high, 188 medium, 22 low, 1 unscored Oct 6: 89 critical, 365 high, 360 medium, 33 low, 156 unscored Oct 7: 55 critical, 124 high, 180 medium, 12 low, 2 unscored Oct 8: 53 critical, 170 high, 229 medium, 25 low, 0 unscored; 5 added to CISA KEV Oct 9: 32 critical, 158 high, 130 medium, 16 low, 6 unscored Oct 10: 76 critical, 143 high, 197 medium, 29 low, 1 unscored Oct 11: 17 critical, 68 high, 153 medium, 16 low, 0 unscored Oct 12: 40 critical, 178 high, 239 medium, 25 low, 0 unscored Oct 13: 152 critical, 1335 high, 700 medium, 27 low, 1 unscored; 2 added to CISA KEV Oct 14: 59 critical, 258 high, 296 medium, 40 low, 43 unscored; 4 added to CISA KEV Oct 15: 41 critical, 199 high, 263 medium, 14 low, 0 unscored; 1 added to CISA KEV Oct 16: 39 critical, 137 high, 219 medium, 25 low, 20 unscored; 2 added to CISA KEV Oct 17: 8 critical, 54 high, 62 medium, 14 low, 0 unscored Oct 18: 9 critical, 61 high, 78 medium, 11 low, 400 unscored Oct 19: 23 critical, 125 high, 264 medium, 38 low, 0 unscored Oct 20: 171 critical, 804 high, 782 medium, 107 low, 0 unscored; 6 added to CISA KEV Oct 21: 54 critical, 199 high, 204 medium, 25 low, 0 unscored Oct 22: 63 critical, 150 high, 187 medium, 29 low, 3 unscored Oct 23: 34 critical, 138 high, 66 medium, 16 low, 170 unscored; 2 added to CISA KEV Oct 24: 11 critical, 27 high, 40 medium, 4 low, 2 unscored Oct 25: 2 critical, 19 high, 36 medium, 10 low, 0 unscored Oct 26: 38 critical, 257 high, 384 medium, 57 low, 13 unscored; 2 added to CISA KEV Oct 27: 89 critical, 283 high, 186 medium, 27 low, 1 unscored; 2 added to CISA KEV Oct 28: 39 critical, 218 high, 243 medium, 40 low, 89 unscored; 2 added to CISA KEV Oct 29: 84 critical, 181 high, 222 medium, 20 low, 2 unscored; 2 added to CISA KEV Oct 30: 35 critical, 170 high, 221 medium, 17 low, 2 unscored; 2 added to CISA KEV Oct 31: 13 critical, 49 high, 62 medium, 17 low, 0 unscored Nov 1: 26 critical, 28 high, 62 medium, 11 low, 0 unscored Nov 2: 35 critical, 201 high, 205 medium, 18 low, 18 unscored Nov 3: 69 critical, 270 high, 342 medium, 37 low, 17 unscored; 1 added to CISA KEV Nov 4: 33 critical, 143 high, 155 medium, 36 low, 23 unscored; 1 added to CISA KEV Nov 5: 35 critical, 119 high, 125 medium, 13 low, 6 unscored Nov 6: 35 critical, 124 high, 193 medium, 39 low, 14 unscored; 1 added to CISA KEV Nov 7: 69 critical, 160 high, 230 medium, 10 low, 12 unscored Nov 8: 10 critical, 27 high, 94 medium, 16 low, 0 unscored Nov 9: 34 critical, 167 high, 228 medium, 50 low, 5 unscored; 4 added to CISA KEV Nov 10: 89 critical, 1152 high, 599 medium, 36 low, 153 unscored; 6 added to CISA KEV Nov 11: 43 critical, 257 high, 234 medium, 46 low, 54 unscored Nov 12: 21 critical, 177 high, 110 medium, 19 low, 3 unscored Sep 17 Oct 1 Oct 15 Oct 29 today
Vulnerabilities published per UTC day for the last 63 days by severity, 32,424 in all, and 74 added to CISA KEV.

Just added to CISA KEV

CISA confirms these are being exploited in the wild. Federal agencies get a deadline to patch; you should treat them the same way.

all known exploited
  1. 7.5
     CVE-2026-20320 A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read s…
  2. 8.8
     CVE-2026-125350 Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
  3. 6.5
     CVE-2026-124194 Microsoft Outlook Spoofing Vulnerability
  4. 9.8
     CVE-2026-116606 Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
  5. 4.3
     CVE-2026-111793 Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted.
  6. 7.2
     CVE-2026-111560 OS Command Injection in Barracuda Appliances

Plug it into anything

The same entries as a feed, a JSON API, an MCP server and a lockfile check. No account and no API key.

~ fencer-intel
$ curl -s "https://intel.fencer.dev/feed?filter=critical" 
<rss version="2.0">
  <channel><title>Fencer Intel — Critical</title>
    <item>
      <title>CVE-2026-20320: A vulnerability in the Open Client Interface ...</title>
      <link>https://intel.fencer.dev/CVE-2026-20320</link>
$ curl -s https://intel.fencer.dev/api/v1/entries/CVE-2026-20320 
{
  "id": "CVE-2026-20320",
  "title": "A vulnerability in the Open Client Interface (OCI) XML Pa...",
  "severity": "high",
  "cvss": {
    "score": 7.5,
    "version": "3.1"
  },
  "kev": {
    "added": "2026-11-10"
  },
  "epss": {
    "score": 0.0082
  },
  "exploits": []
}
$ claude mcp add --transport http fencer-intel https://intel.fencer.dev/mcp 
# tools: search, get_vulnerability, list_feed, check_stack
# your agent checks a package before it installs it
$ curl -s -F lockfile=@package-lock.json https://intel.fencer.dev/api/v1/stack 
# every advisory for the versions you pin, exploited first
# the report has its own feed for new matches

All · Palo Alto PAN-OS

Newest first, late arrivals on top. Also a feed.

  1. 1.3
    CVE-2026-0325 PAN-OS: GlobalProtect Authorization Bypass Vulnerability
    Palo Alto PAN-OS
  2. 1.7
    CVE-2026-0326 PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing
    Palo Alto PAN-OS
  3. 2.3
    CVE-2026-0327 PAN-OS: Privilege Escalation Vulnerability in GlobalProtect
    Palo Alto PAN-OS
  4. 2.7
    CVE-2026-0328 PAN-OS: User Impersonation through GlobalProtect Portal
    Palo Alto PAN-OS
  5. 4.6
    CVE-2026-0329 PAN-OS: Buffer Overflow Vulnerability
    Palo Alto PAN-OS
  6. 6.1
    CVE-2026-0330 PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama
    Palo Alto PAN-OS
  7. 6.6
    CVE-2026-0331 PAN-OS: Sensitive Information Disclosure Vulnerability
    Palo Alto PAN-OS
  8. 9.8
    CVE-2026-109618 RCE via OOM corruption
    PHPPalo Alto PAN-OSbitnami
    kev 1 public exploit EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  9. 8.1
    CVE-2026-109619 RCE via stale global state
    PHPPalo Alto PAN-OSbitnami
    kev EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  10. 1.1
    CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability
    Palo Alto PAN-OS
  11. 1.2
    CVE-2026-0317 PAN-OS: Denial of Service Vulnerability
    Palo Alto PAN-OS
  12. 4.6
    CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama
    Palo Alto PAN-OS
  13. 4.9
    CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability
    Palo Alto PAN-OS
  14. 6.1
    CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability
    Palo Alto PAN-OS
  15. 6.6
    CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
    Palo Alto PAN-OS
  16. 7.2
    CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
    Palo Alto PAN-OS
    kev EPSS 2.1% chance of exploitation in 30 days, percentile 82%
  17. 1.1
    CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
    Palo Alto PAN-OS
  18. 4.0
    CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
    Palo Alto PAN-OS
  19. 7.2
    CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing
    Palo Alto PAN-OS
  20. 7.5
    CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering
    Palo Alto PAN-OS
  21. 6.1
    CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
    Palo Alto PAN-OS
  22. 7.2
    CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass
    Palo Alto PAN-OS
  23. 7.1
    CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface
    Palo Alto PAN-OS
  24. 6.5
    CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface
    Palo Alto PAN-OS
  25. 7.2
    CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
    Palo Alto PAN-OS
  26. 9.9
    CVE-2026-0284 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
    Palo Alto PAN-OS
  27. 4.9
    CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
    Palo Alto PAN-OS
  28. 7.2
    CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI
    Palo Alto PAN-OS
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  29. 7.5
    CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
    Palo Alto PAN-OS
  30. 7.5
    CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
    Palo Alto PAN-OS