live: new CVEs every 10 minutes, KEV hourly
Every vulnerability. One feed.
The CVE List, GitHub advisories, OSV, NVD, ENISA EUVD and distro advisories merged into one entry per vulnerability, flagged with what attackers actually use: CISA KEV, EPSS and public exploits.
212 new in the last 24 hours, 37 critical in 7 days, 30 added to CISA KEV in 30 days.
Just added to CISA KEV
CISA confirms these are being exploited in the wild. Federal agencies get a deadline to patch; you should treat them the same way.
all known exploited-
7.5CVE-2026-19868 An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authenticati…
-
5.5CVE-2024-27834 The issue was addressed with improved checks.
-
8.1CVE-2026-119977 WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
-
4.3CVE-2026-118527 Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to uploa…
-
7.0CVE-2026-111357 Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege…
-
10.0CVE-2026-97229 Integer Overflow or Wraparound in GitLab
Plug it into anything
The same entries as a feed, a JSON API, an MCP server and a lockfile check. No account and no API key.
curl -s "https://vulns.fencer.dev/feed?filter=critical"
<rss version="2.0"> <channel><title>Fencer Vulns — Critical</title> <item> <title>CVE-2026-19868: An authentication enforcement vulnerability i...</title> <link>https://vulns.fencer.dev/CVE-2026-19868</link>
curl -s https://vulns.fencer.dev/api/v1/entries/CVE-2026-19868
{ "id": "CVE-2026-19868", "title": "An authentication enforcement vulnerability in SonicOS SS...", "severity": "high", "cvss": { "score": 7.5, "version": "3.1" }, "kev": { "added": "2026-11-06" }, "epss": { "score": 0.0062 }, "exploits": [] }
claude mcp add --transport http fencer-vulns https://vulns.fencer.dev/mcp
# tools: search, get_vulnerability, list_feed, check_stack # your agent checks a package before it installs it
curl -s -F lockfile=@package-lock.json https://vulns.fencer.dev/api/v1/stack
# every advisory for the versions you pin, exploited first # the report has its own feed for new matches
All · IBM Db2
Newest first. Every view here is also a feed.