Live · Vendor changelogs checked
Is it blocked at the edge yet?
Which WAFs block each exploited CVE, and since when. Quoted from vendor changelogs, tested in our lab, and one prompt away from your agent.
1,766
Exploited CVEs
982
With a WAF rule
1,610
Vendor quotes
386/527
No rule yet (2025+)
Built for agents
Give your agent the context
One prompt for Claude Code, Cursor, Codex or any MCP client.
Connect to the Vigilbase CVE MCP server (https://cve.vigilbase.com/mcp, streamable HTTP, no key needed) and use it for vulnerability triage: 1. Scan my lockfiles with scan_dependencies and list the vulnerable packages, exploited-in-the-wild CVEs first, then ones with public exploit code. 2. For each of those CVEs, call get_cve_coverage: tell me whether my WAF vendor claims a rule, whether it blocks by default, and what Vigilbase's own lab test measured. 3. Run check_exposure for my domain on the top CVEs. 4. Give me a prioritised fix list with the fixed versions, and cite the source URLs the server returns.
claude mcp add --transport http vigilbase-cve https://cve.vigilbase.com/mcp
{
"mcpServers": {
"vigilbase-cve": {
"url": "https://cve.vigilbase.com/mcp"
}
}
}# ~/.codex/config.toml [mcp_servers.vigilbase-cve] url = "https://cve.vigilbase.com/mcp"
https://cve.vigilbase.com/mcp
scan_dependenciesget_cve_coveragecheck_exposurelist_trendingsearch_cveslist_new_rulescompare_vendorsget_waf_benchmarklist_exploited_gapsget_scan_statsTrending now
All- 1ipv4: free inet_opt and ireq_opt after an RCU grace periodCVE-2026-98432Exploit code9.853 people↑ 45
- 2Google Brotli Unchecked Return Value VulnerabilityCVE-2026-111497KEVExploit code9.25 people↑ 4
- 3GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCVE-2026-97229KEV10.05 people↑ 5
- 4PHP Stale Internal Request-State VulnerabilityCVE-2026-109619KEVExploit code9.23 people↑ 3
- 5Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8CVE-2026-1056069.54 people↑ 4
- 6Langflow OSS is affected by multiple vulnerabilitiesCVE-2026-936809.83 people↑ 3
Live activity
Live- CVE Alerts CVE-2026-28588CVE-2026-28588 - Android ExternalStorageProvider Logic Error Privilege Escalation CVE ID : CVE-2026-28588 Published : Nov. 2, 2026, 8:17 p.m. | 46 minutes ago Description : In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access...
- ExploitBench CVE-2026-98432CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP handshake (IPv6 not hit by the main issue). CVSS 9.8 from the kernel CNA; NVD hasn't analysed it yet. Not on CISA KEV (2026.10.30). Fixed in stable 6.6.159, 6.12.113, 6.18.56, 7.2.10. https://t.co/axObV10tw3
- Jonathan Cecil CVE-2026-98432Ubuntu has not released a patch for a Linux 0-day remote code execution flaw in LTS kernels after nearly three weeks (CVE-2026-98432). https://t.co/XDyDOQuR63
- New exploit repo CVE-2026-62911c5z54/cve-2026-62911-poc: CVE-2026-62911 — Exchange MRSProxy Pre-Auth RCE PoC | Scanner + Exploit | NTLM Relay → Webshell → SYSTEM
- YogiBear_XRP CVE-2026-109618Why I’m holding the launch of the application: Since PHP2Shell (CVE-2026-109618 / CVE-2026-109619) was disclosed and patched around October 20–21, the active threat environment has been elevated. Confirmed real-world PHP2Shell activity so far has been limited (no widespread mass
- YogiBear_XRP CVE-2026-109619Why I’m holding the launch of the application: Since PHP2Shell (CVE-2026-109618 / CVE-2026-109619) was disclosed and patched around October 20–21, the active threat environment has been elevated. Confirmed real-world PHP2Shell activity so far has been limited (no widespread mass
- TheHackerWire CVE-2026-91893🟠 CVE-2026-91893 - High (7.8) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege ... https://www.thehackerwire.com/vulnerability/CVE-2026-91893/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
- TheHackerWire CVE-2026-91898🟠 CVE-2026-91898 - High (8.1) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verificati... https://www.thehackerwire.com/vulnerability/CVE-2026-91898/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
- TheHackerWire CVE-2026-29508🟠 CVE-2026-29508 - High (8.8) ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow... https://www.thehackerwire.com/vulnerability/CVE-2026-29508/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
- TheHackerWire CVE-2026-91893🟠 CVE-2026-91893 - High (7.8) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.…
- TheHackerWire CVE-2026-91898🟠 CVE-2026-91898 - High (8.1) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, le.…
- TheHackerWire CVE-2026-29508🟠 CVE-2026-29508 - High (8.8) ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value tha.…
- Nurhayat Yurtaslan CVE-2026-77876🚨 CWP CVE-2026-77876: unauthenticated command injection in protected_directory (CVSS 3.1:9.8). Exploitation unconfirmed. Version conflict: CNA says <1.16; CWP lists user-panel hardening in 1.27. Update to 1.30; verify. https://t.co/Wu8rQZWckD https://t.co/E421vKiHPg https://t…
- Aretiq.AI CVE-2026-73696ARETIQ Daily Vulnerability Bulletin — November 02, 2026 🔴 CRITICAL: CVE-2026-73696 (control_web_panel/control_web_panel) AAS 12.0 13 vulnerabilities — CRITICAL: 1, HIGH: 12 Full bulletin: https://t.co/UPQfNEQzHv
1,766 CVEs
BlocksLogsOffRuleNo public claimBefore feed historyNo public source+Nd: first rule N days after the CVE was published
From knowing to protected
This site is free. When you want it handled, Vigilbase does the work.
Vigilbase Shield
Get vendor rules like these in front of your site.
Managed Cloudflare WAF and DDoS protection on a monthly plan, run by our team.
See Shield plansVigilbase OS
Know the day a CVE reaches your stack, and close it.
Connects the security tools you already pay for. Vigil investigates, makes the fixes you authorise and verifies them.
Get startedCloudflare Checkup
Already on Cloudflare? See how it is set up.
Free review of your Cloudflare configuration, with a read-only API token.
Run a free checkup