Live · Vendor changelogs checked
Is it blocked at the edge yet?
Which WAFs block each exploited CVE, and since when. Quoted from vendor changelogs, tested in our lab, and one prompt away from your agent.
1,766
Exploited CVEs
982
With a WAF rule
1,610
Vendor quotes
386/527
No rule yet (2025+)
Built for agents
Give your agent the context
One prompt for Claude Code, Cursor, Codex or any MCP client.
Connect to the Vigilbase CVE MCP server (https://cve.vigilbase.com/mcp, streamable HTTP, no key needed) and use it for vulnerability triage: 1. Scan my lockfiles with scan_dependencies and list the vulnerable packages, exploited-in-the-wild CVEs first, then ones with public exploit code. 2. For each of those CVEs, call get_cve_coverage: tell me whether my WAF vendor claims a rule, whether it blocks by default, and what Vigilbase's own lab test measured. 3. Run check_exposure for my domain on the top CVEs. 4. Give me a prioritised fix list with the fixed versions, and cite the source URLs the server returns.
claude mcp add --transport http vigilbase-cve https://cve.vigilbase.com/mcp
{
"mcpServers": {
"vigilbase-cve": {
"url": "https://cve.vigilbase.com/mcp"
}
}
}# ~/.codex/config.toml [mcp_servers.vigilbase-cve] url = "https://cve.vigilbase.com/mcp"
https://cve.vigilbase.com/mcp
scan_dependenciesget_cve_coveragecheck_exposurelist_trendingsearch_cveslist_new_rulescompare_vendorsget_waf_benchmarklist_exploited_gapsget_scan_statsTrending now
All- 1ipv4: free inet_opt and ireq_opt after an RCU grace periodCVE-2026-98432Exploit code9.868 people↑ 60
- 2Google Brotli Unchecked Return Value VulnerabilityCVE-2026-111497KEVExploit code9.27 people↑ 6
- 3GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityCVE-2026-97229KEV10.07 people↑ 7
- 4CSRF in Secure Access Server v14.60CVE-2026-977189.45 people↑ 5
- 5PHP Stale Internal Request-State VulnerabilityCVE-2026-109619KEVExploit code9.23 people↑ 3
- 6Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form FieldCVE-2026-1024359.82 people↑ 2
Live activity
Live- Cybercave Technologies, LLC CVE-2026-98432This week: ask whoever runs your web server, in writing, whether the CVE-2026-98432 fix is in and the server restarted. Heard back? Reply and tell us. Want to learn how to check your server, test backups and guard IT tools? Check out our guides here: https://t.co/0IhWkxy6Ke
- Builder Brief CVE-2026-98432Still no Ubuntu kernel fix for CVE-2026-98432, the Linux bug Claude wrote a root exploit for. Debian has one. On an Ubuntu VPS? I wouldn't just wait. Turn off multipath TCP if you don't use it and ask your host for their plan. https://t.co/grw7YKOrDv
- nichu42 CVE-2026-98432Reaffirming its commitment to enterprise-grade stability, Canonical announced Monday that CVE-2026-98432, the critical use-after-free in the Linux kernel's IPv4 TCP code, will receive a full 10 years of Long-Term Support on every Ubuntu release it affects. "Other distros will p…
- The Hacker Wire CVE-2026-77876🚨 CVE-2026-77876 & 73696 (CVSS 9.8 Critical) - PoC Active Execution After Redirect auth bypass in Control Web Panel (CWP < 1.16) chains with command injection in protected_directory for root RCE. ⚡ Action: Upgrade CWP to v1.16 immediately. 🔗 https://t.co/ZSp7kEUVAY https://…
- New exploit repo CVE-2026-98432GarphenGate/cve-2026-98432-defender-toolkit: Exposure audits, hunt queries and a validated interim mitigation for CVE-2026-98432, the use-after-free in the Linux IPv4 TCP handshake. Read-only scripts with a self-test. From GarphenGate Security Research.
- Tibo CVE-2026-98432Go 1.24 silently enabling MPTCP listeners by default just handed Claude a silver platter. CVE-2026-98432 (CVSS 9.8) lets unauth remote peers pop root during the IPv4 TCP handshake. 10 years old. Anthropic’s lab exploit takes 48 min to leak pointers and drop a shell on any host…
- stemshop.bsky.social CVE-2026-97718🚨 CVE-2026-97718 — CVSS 9.4 CRITICAL CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. ... 🔎 https://stemshop.top/cve/CVE-2026-97718 #CVE #CyberSecurity #InfoSec
- stemshop.bsky.social CVE-2026-116769🚨 CVE-2026-116769 — CVSS 9.3 CRITICAL CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13... 🔎 https://stemshop.top/cve/CVE-2026-116769 #CVE #CyberSecurity #InfoSec
- stemshop.bsky.social CVE-2026-102435🚨 CVE-2026-102435 — CVSS 9.8 CRITICAL The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to in... 🔎 https://stemshop.top/cve/CVE-2026-102435 #CVE #CyberSecurity #InfoSec
- securityrss.ai CVE-2026-97229An attacker attempted to exploit a critical GitLab vulnerability (CVE-2026-97229, CVSS 10.0) on Alpine Linux's GitLab server shortly after a fix was released. Although no successful exploit was confirmed, Alpine rebuilt the server and reset passwords as a precaution.
- amori CVE-2026-97229【GitLab、1,000台超が重大な欠陥に未対応】 Shadowserverは11月1日、CVE-2026-97229に脆弱な公開GitLabを1,000台超確認したと公表した。 これは未修正の観測数であり、全台の侵害が確認されたという意味ではない。
- amori CVE-2026-104935【Ivanti VPN、3つの欠陥をつなぐ侵入】 Connect SecureのCVE-2026-104935・111357・118527をつなぎ、認証なしでroot権限を得る攻撃が確認されている。 Volexityは、ウェブシェルを残さずログを消す手口を報告し、Integrity Checkerだけでは侵害を見つけにくいと指摘した。
- 矢野朋義@AI活用・サービス開発 CVE-2026-98432🔐 直近の重要な脆弱性(2026-11-03 07:00 JST時点) 1) CVE-2026-98432 📦 対象製品:Linuxカーネル(IPv4 TCP処理)。Red Hat Enterprise Linuxなど、影響を受けるディストリビューションのカーネル ⚠️ 影響:Red
- cve.now CVE-2026-86596🆕 New CVE remote code execution in IPN email template handling (CVE-2026-86596) An attacker with custom-level access can inject PHP code via the item_name parameter to run any code on the server. No patch listed yet https://t.co/pGAqpzrMM3
1,766 CVEs
BlocksLogsOffRuleNo public claimBefore feed historyNo public source+Nd: first rule N days after the CVE was published
From knowing to protected
This site is free. When you want it handled, Vigilbase does the work.
Vigilbase Shield
Get vendor rules like these in front of your site.
Managed Cloudflare WAF and DDoS protection on a monthly plan, run by our team.
See Shield plansVigilbase OS
Know the day a CVE reaches your stack, and close it.
Connects the security tools you already pay for. Vigil investigates, makes the fixes you authorise and verifies them.
Get startedCloudflare Checkup
Already on Cloudflare? See how it is set up.
Free review of your Cloudflare configuration, with a read-only API token.
Run a free checkup