Live tracker of exploited and high-impact vulnerabilities
New vulnerabilities from CERTs, vendors, researchers and newsrooms in 180+ countries, checked automatically, with how widely each one is being exploited, warned about and covered.
Panic meter
Connecting- Researchers talking
- –
- News outlets covering
- –
- CERTs and agencies warning
- –
Distinct people and organisations discussing new vulnerabilities in the past 24 hours.
Trending now
Outbreak map
- Countries in the news
- –
- Agencies warning
- –
- Countries warned
- –
- Patient zero
- –
Daily panic
Vulnerabilities
IBM vulnerabilities
Every IBM vulnerability Vulnocalypse is tracking, newest first: whether it’s being exploited, which CERTs have warned about it and how widely it’s covered. Subscribe with the RSS feed for IBM alerts.
- 36impact
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption
0 news outlets0 CERTs0 researchersCVSS 7.5 - 34impact
IBM Planning Analytics Local is affected by security vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 7.5 - 31impact
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 5.9 - 35impact
IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability
0 news outlets0 CERTs0 researchersCVSS 7.5 - 33impact
IBM Planning Analytics Local is affected by security vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 8.8 - 36impact
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 7.4 - 36impact
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 7.5 - 36impact
Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.
0 news outlets0 CERTs0 researchersCVSS 7.5 - 35impact
Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.
0 news outlets0 CERTs0 researchersCVSS 7.4 - 31impact
IBM Planning Analytics Local is affected by security vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 8.1 - 36impact
IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2
0 news outlets0 CERTs0 researchersCVSS 7.5 - 36impact
IBM Planning Analytics Local is affected by security vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 8.2 - 24impact
IBM Planning Analytics Local is affected by security vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 6.4 - 34impact
IBM WebSphere Application Server is affected by a remote code execution vulnerability
0 news outlets0 CERTs0 researchersCVSS 8.5 - 30impact
IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability
0 news outlets0 CERTs0 researchersCVSS 7.2 - 37impact
IBM Guardium Data Protection is affected by a security vulnerability
0 news outlets0 CERTs0 researchersCVSS 8.1 - 43impact
IBM App Connect Enterprise is vulnerable to a credential exposure
0 news outlets0 CERTs0 researchersCVSS 9.8 - 33impact
IBM Planning Analytics Local is affected by security vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 8.8 - 21impact
IBM Planning Analytics Local is affected by security vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 5.4 - 26impact
IBM Planning Analytics Local is affected by security vulnerabilities
0 news outlets0 CERTs0 researchersCVSS 7.1 - 36impact
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability
0 news outlets0 CERTs0 researchersCVSS 7.5 - 24impact
IBM WebSphere Application Server information disclosure
0 news outlets0 CERTs0 researchersCVSS 3.7 - 35impact
IBM Planning Analytics Buffer Overflow
0 news outlets0 CERTs0 researchersCVSS 8.8 - 35impact
DataStage on Cloud Pak for Data Information Disclosure
0 news outlets0 CERTs0 researchersCVSS 9.6 - 40impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 8.1 - 40impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 8.1 - 40impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 8.1 - 41impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 8.6 - 34impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 7.5 - 45impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 9.8 - 40impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 8.1 - 40impact
IBM Guardium Data Protection Buffer Overflow
0 news outlets1 CERTs0 researchersCVSS 8.1 - 40impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 8.1 - 47impact
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
0 news outlets1 CERTs0 researchersCVSS 9.8 - 21impact
IBM DataPower Gateway Cross-Site Scripting
0 news outlets0 CERTs0 researchersCVSS 5.4 - 29impact
IBM DataPower Gateway NULL Pointer Dereference
0 news outlets0 CERTs0 researchersCVSS 5.9 - 42impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 9.8 - 39impact
IBM DataPower Gateway affected by cross-site scripting
0 news outlets0 CERTs0 researchersCVSS 9.3 - 34impact
IBM DataPower Gateway NULL Pointer Dereference
0 news outlets0 CERTs0 researchersCVSS 7.5 - 28impact
IBM DataPower Gateway Denial of Service
0 news outlets0 CERTs0 researchersCVSS 5.9 - 36impact
IBM DataPower Gateway XXE
0 news outlets0 CERTs0 researchersCVSS 8.2 - 34impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 7.5 - 36impact
IBM DataPower Gateway Denial of Service
0 news outlets0 CERTs0 researchersCVSS 8.2 - 35impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 7.5 - 24impact
IBM DataPower Gateway Incorrect Authorization
0 news outlets0 CERTs0 researchersCVSS 6.5 - 34impact
IBM DataPower Gateway Denial of Service
0 news outlets0 CERTs0 researchersCVSS 7.5 - 33impact
IBM DataPower Gateway Improper Verification of Cryptographic Signature
0 news outlets0 CERTs0 researchersCVSS 8.1 - 34impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 7.5 - 37impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 8.6 - 32impact
IBM DataPower Gateway Improper Verification of Cryptographic Signature
0 news outlets0 CERTs0 researchersCVSS 7.4 - 30impact
IBM DataPower Gateway Use After Free
0 news outlets0 CERTs0 researchersCVSS 6.5 - 24impact
IBM DataPower Gateway Insufficient Verification of Data Authenticity
0 news outlets0 CERTs0 researchersCVSS 6.5 - 34impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 7.5 - 36impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 8.1 - 35impact
IBM DataPower Gateway Denial of Service
0 news outlets0 CERTs0 researchersCVSS 7.5 - 33impact
IBM DataPower Gateway Type Confusion
0 news outlets0 CERTs0 researchersCVSS 7.5 - 34impact
IBM DataPower Gateway Buffer Underwrite
0 news outlets0 CERTs0 researchersCVSS 7.5 - 37impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 8.6 - 43impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 9.8 - 30impact
IBM DataPower Gateway Out-of-bounds Read
0 news outlets0 CERTs0 researchersCVSS 6.5 - 35impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 7.5 - 34impact
IBM DataPower Gateway Out-of-bounds Read
0 news outlets0 CERTs0 researchersCVSS 7.5 - 29impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 7.7 - 36impact
IBM DataPower Gateway Out-of-bounds Read
0 news outlets0 CERTs0 researchersCVSS 8.2 - 36impact
IBM DataPower Gateway Buffer Overflow
0 news outlets0 CERTs0 researchersCVSS 8.1 - 31impact
IBM DataPower Gateway Buffer Overflow
0 news outlets0 CERTs0 researchersCVSS 8.0 - 27impact
IBM DataPower Gateway Out-of-bounds Read
0 news outlets0 CERTs0 researchersCVSS 5.3 - 41impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 9.8 - 42impact
IBM DataPower Gateway Out-of-bounds Write
0 news outlets0 CERTs0 researchersCVSS 9.8 - 35impact
IBM DataPower Gateway Denial of Service
0 news outlets0 CERTs0 researchersCVSS 7.5 - 34impact
IBM DataPower Gateway Improper Authorization
0 news outlets0 CERTs0 researchersCVSS 7.4 - 42impact
IBM DataPower Gateway Buffer Overflow
0 news outlets0 CERTs0 researchersCVSS 9.8 - 42impact
IBM DataPower Gateway Improper Authentication
0 news outlets0 CERTs0 researchersCVSS 9.8 - 30impact
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Request Smuggling
0 news outlets0 CERTs0 researchersCVSS 6.5 - 28impact
IBM Sterling Connect:Direct for Unix Buffer Overflow
0 news outlets0 CERTs0 researchersCVSS 7.8 - 24impact
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
0 news outlets0 CERTs0 researchersCVSS 4.8 - 40impact
IBM WebSphere Application Server Liberty Improper Access Control
0 news outlets0 CERTs0 researchersCVSS 9.1 - 24impact
IBM Db2 Genius Hub Improper verification of cryptographic signature
0 news outlets0 CERTs0 researchersCVSS 5.1 - 30impact
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control
0 news outlets0 CERTs0 researchersCVSS 6.5 - 37impact
IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
0 news outlets0 CERTs0 researchersCVSS 8.6 - 29impact
IBM Sterling Connect:Direct for Unix Improper Privilege Management
0 news outlets0 CERTs0 researchersCVSS 8.4 - 24impact
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
0 news outlets0 CERTs0 researchersCVSS 4.8 - 30impact
- 36impact
IBM QRadar SIEM Out-of-bounds Read
0 news outlets0 CERTs0 researchersCVSS 8.2 - 29impact
IBM WebSphere Application Server is affected by an authorization bypass
0 news outlets0 CERTs0 researchersCVSS 8.0 - 34impact
IBM WebSphere Application Server Liberty Incorrect Authorization
0 news outlets0 CERTs0 researchersCVSS 7.4 - 35impact
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data
0 news outlets0 CERTs0 researchersCVSS 7.5 - 35impact
IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths
0 news outlets0 CERTs0 researchersCVSS 7.5 - 20impact
IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system
0 news outlets0 CERTs0 researchersCVSS 4.3 - 24impact
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
0 news outlets0 CERTs0 researchersCVSS 4.8 - 36impact
IBM WebSphere Application Server is affected by a bypass authentication vulnerability
0 news outlets0 CERTs0 researchersCVSS 8.1 - 30impact
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Open Redirect
0 news outlets0 CERTs0 researchersCVSS 6.5 - 30impact
IBM WebSphere Application Server IBM WebSphere Application Server - Liberty HTTP Request Smuggling
0 news outlets0 CERTs0 researchersCVSS 6.5 - 36impact
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
0 news outlets0 CERTs0 researchersCVSS 8.7 - 39impact
IBM WebSphere Application Server Liberty is affected by an authentication bypass
0 news outlets0 CERTs0 researchersCVSS 9.1 - 31impact
IBM WebSphere Application Server Liberty Denial of Service
0 news outlets0 CERTs0 researchersCVSS 6.5 - 35impact
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
0 news outlets0 CERTs0 researchersCVSS 7.5 - 31impact
IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions
0 news outlets0 CERTs0 researchersCVSS 8.1 - 36impact
IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data
0 news outlets0 CERTs0 researchersCVSS 8.2 - 18impact
IBM Db2 Genius Hub Missing Cryptographic Step
0 news outlets0 CERTs0 researchersCVSS 3.1
Sources
CERTs and cyber security agencies, national news outlets in every country we could find, vendor advisories, research blogs and the security press. Every source is polled on its own schedule, by RSS where possible and by headless browser where not. Broken feeds are repaired automatically; anything still failing is listed here.
Sources admin
Enter the admin token from your server’s .env file (ADMIN_TOKEN). It’s sent once to start a session and isn’t stored in this browser.
Recent sign-in activity
Pipeline, last 24 hours
How many articles each type of source produced, how many were read in full, and how many were linked to a vulnerability. “Unmatched” are articles that look like vulnerability news but couldn’t be linked; the reasons and examples show what to improve.
Add a source
Coverage
All sources
How it works
Vulnocalypse reads vulnerability registries, government CERTs, vendor advisories, research blogs and newsrooms around the clock, links everything that refers to the same vulnerability, and only shows what passes automated validation.
What gets into the feed
A vulnerability is admitted when it is corroborated, either through a published CVE record or through at least two independent organisations, and its impact score reaches 60 out of 100. Anything listed in a known-exploited catalogue is admitted regardless of score. Once admitted, an entry stays, so the feed never flickers.
Impact score
Up to 30 points for severity (CVSS, or inferred from the description when no score exists), 25 for exploitation, 15 for blast radius by product category (edge devices and identity systems score highest), 15 for attention from news, CERTs and researchers, 10 for EPSS exploitation probability, and 5 for pre-authentication. Every entry shows its breakdown.
Exploitation status
We only mark something exploited when there is a citable source: a KEV listing (CISA, VulnCheck or ENISA), a statement from the vendor or a government agency, CISA’s SSVC assessment, or at least two independent organisations reporting attacks with no later denial from the vendor. Phrases like “no evidence of exploitation” are detected and count against a claim.
Validation, without humans
Identifiers are checked against the CVE List; rejected or non-existent CVEs are dropped. Titles, vendors, products and CVSS come from the official record rather than from headlines. Wire stories syndicated across outlets are counted once. Roundups that list dozens of CVEs only count the ones they actually discuss. Reports without an identifier wait for corroboration and are merged into the right CVE once one is assigned. Every decision is logged and shown on each vulnerability’s page.
The Panic meter
Three numbers over the past 24 hours, counting only vulnerabilities first seen in the last 14 days: distinct researchers posting about them, distinct news organisations covering them, and distinct CERTs and agencies warning about them. Each is ranked against its own 90-day history, weighted 35% CERTs, 35% news and 30% researchers, and stretched so the top levels stay rare. Each day’s score is split across the vulnerabilities that caused it.
The outbreak map
The map shows two things for every country: how many national news outlets are covering new vulnerabilities, and whether the national CERT or cyber security agency has issued a warning. National outlets are read directly, through local-language Google News editions, and through GDELT, which attributes coverage in over 100 languages to its source country. International security press is left off the map so it shows national attention, not trade coverage. Replay the spread to watch a vulnerability travel from patient zero across the world.
Subscribe
- Everything (RSS), also as Atom and JSON Feed
- Exploited only and KEV-listed only
- Updates: new KEV listings, exploitation changes and public exploits for tracked vulnerabilities
- Per vendor:
/feed.xml?vendor=Fortinet, or by score:/feed.xml?min_score=80
Use it from an AI agent
Vulnocalypse runs a read-only MCP server. Add it to any MCP client as a remote server:
https://vulnocalypse.com/mcpTools: get_feed, search_vulnerabilities, get_vulnerability, check_exposure (send the products you run and get back anything that affects them), get_panic and explain_panic_day. The JSON API is documented at /api/docs.