CVEs: 68,202
Known exploited: 1,779
Breaches: 1,030
Updated: 8 min ago

Security threats, piped to your terminal.

Spydr watches the CVE feeds, CISA’s known-exploited list and breach disclosures. Ask it from any terminal with curl, wire it into CI and alerts — or read the week’s highlights in The Security Skim.

$ curl -L spydr.io

Read the docs Get the weekly Skim

Exploited this week

$ curl -L "spydr.io/threats?exploited=1&since=7d&limit=5"
spydr · threats · exploited · since 7d            7 results · synced 14:02 UTC
──────────────────────────────────────────────────────────────────────────────
 6.5 medium    CVE-2026-124194  2026-11-10  KEV  EPSS 1.6%  Microsoft 365 App…
               Product ui does not warn user of unsafe actions in Microsoft O…
 8.8 high      CVE-2026-125350  2026-11-10  KEV EPSS 0.96%  Google Chrome
               Use after free in XML in Google Chrome prior to 157.0.8103.50…
 9.8 critical  CVE-2026-123218  2026-11-07  KEV EPSS 0.53%  IBM Aspera Faspex
               IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authoriz…
 7.5 high      CVE-2026-19868   2026-11-06  KEV EPSS 0.53%  SonicWall SonicOS
               An authentication enforcement vulnerability in SonicOS SSLVPN…
 9.8 critical  CVE-2026-116779  2026-11-05  KEV  EPSS 2.5%  signalwire freesw…
               FreeSWITCH is a Software Defined Telecom Stack enabling the di…
──────────────────────────────────────────────────────────────────────────────
page 1 of 2 · web: https://spydr.io/threats?exploited=1&since=7d&limit=5 · next: &page=2
covers: CVEs published since 2026-07-14 (the last 120 days), plus every CVE in CISA KEV
scripts: add &format=json (or ndjson, csv, rss) · help: curl -L spydr.io/help
Data: This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA KEV · FIRST EPSS.

Your stack

$ curl -L "spydr.io/threats?q=nginx,openssl,linux&cvss=7&limit=5"
spydr · threats · q=nginx,openssl,linux · cvss ≥ 7 3842 results · synced 14:02 UTC
note: 2983 more CVEs match but have no score yet, so cvss=/severity= left them out. Add unscored=1 to include them.
──────────────────────────────────────────────────────────────────────────────
 9.2 critical  CVE-2026-42530   2026-06-17       EPSS 6.2%  F5 NGINX Open Sou…
               NGINX Open Source has a vulnerability in the ngx_http_v3_modul…
 9.2 critical  CVE-2026-42055   2026-06-17       EPSS 6.5%  F5 NGINX Open Sou…
               NGINX Plus and NGINX Open Source have a vulnerability in the n…
 7.1 high      CVE-2026-102335  2026-09-28      EPSS 0.23%  NginxProxyManager…
               Nginx Proxy Manager through 2.16.0 fails to restrict the advan…
 9.1 critical  CVE-2026-102334  2026-09-28      EPSS 0.45%  NginxProxyManager…
               Nginx Proxy Manager through 2.16.0 lacks rate-limiting on auth…
 9.4 critical  CVE-2026-107806  2026-10-09      EPSS 0.57%  0xJacky nginx-ui
               Nginx UI is a web user interface for the Nginx web server. Fro…
──────────────────────────────────────────────────────────────────────────────
page 1 of 769 · web: https://spydr.io/threats?q=nginx%2Copenssl%2Clinux&cvss=7&limit=5 · next: &page=2
covers: CVEs published since 2026-07-14 (the last 120 days), plus every CVE in CISA KEV
scripts: add &format=json (or ndjson, csv, rss) · help: curl -L spydr.io/help
Data: This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA KEV · FIRST EPSS.

Breaches

$ curl -L "spydr.io/breaches?since=30d&limit=4"
spydr · breaches · since 30d                      8 results · synced 13:39 UTC
──────────────────────────────────────────────────────────────────────────────
2026-11-11  YouHack                   7.2M accounts     youhack…
            Email addresses, IP addresses, Passwords, Usernames
2026-11-11  СберСпасибо (SberSpasib…  3.3M accounts     spasibo…
            Bank card numbers, Dates of birth, Email addresses, Loyalty progr…
2026-11-03  Harvard                   851K accounts     harvard…
            Charitable donations, Citizenship statuses, Dates of birth, Educa…
2026-10-27  AfD                       345K accounts     afd.de (sensitive)
            Email addresses, Email messages
──────────────────────────────────────────────────────────────────────────────
page 1 of 2 · web: https://spydr.io/breaches?since=30d&limit=4
Breach data from Have I Been Pwned (haveibeenpwned.com), licensed under CC BY 4.0.

Level B1 · The base

Two ways to keep up

The same feed, raw or distilled. Use whichever fits the moment.

Room 01 · Terminal

In your terminal

Every page on this site is also an API. Filter by keyword, CVE, CVSS score, exploit status or date, and get a table, JSON, CSV or RSS back.

curl -L "spydr.io/threats?q=nginx&cvss=7"
curl -L "spydr.io/threats?kev=1&since=7d"
curl -L "spydr.io/breaches?since=30d"

API & automation docs →

Room 02 · Mailroom

In your inbox

The Security Skim reads the feed for you: every Tuesday, the vulnerabilities being exploited, the breaches worth knowing about and what to patch first.

Weekly digest, five minutes to read
Long reads when something big breaks
No sponsors, unsubscribe from any issue

Read The Skim →

Level B2 · Bedrock

Latest

Straight from the feed. CVE data 8 min ago, breaches 31 min ago.

Open the full feed

Added to CISA’s exploited list · last 7 days

Vulnerabilities added to CISA KEV in the last 7 days
Score	CVE	Affected	Added to KEV
9.3 critical	CVE-2026-116606 KEV	Barracuda Email Security Gateway (ESG)	10 Nov 2026
8.8 high	CVE-2026-125350 KEV	Google Chrome	10 Nov 2026
8.6 high	CVE-2026-111560 KEV	Barracuda Email Security Gateway (ESG)	10 Nov 2026
7.5 high	CVE-2026-20320 KEV	Cisco BroadWorks	10 Nov 2026
6.5 medium	CVE-2026-124194 KEV	Microsoft 365 Apps for Enterprise	10 Nov 2026
4.3 medium	CVE-2026-111793 KEV	Openwave Messaging (Ireland) Limited Webtop Media Transcoder	10 Nov 2026

New high and critical CVEs · last 24 hours

High and critical CVEs published in the last 24 hours
Score	CVE	Affected	Published
10.0 critical	CVE-2026-78287	STAGGS	11 Nov 2026
10.0 critical	CVE-2026-121889	Adobe Connect	10 Nov 2026
10.0 critical	CVE-2026-121356	Adobe Connect	10 Nov 2026
10.0 critical	CVE-2026-121353	Adobe Connect	10 Nov 2026
10.0 critical	CVE-2026-121352	Adobe Connect	10 Nov 2026
10.0 critical	CVE-2026-121351	Adobe Connect	10 Nov 2026

Automate it

Plain HTTP, stable URLs and exit codes you can script against. Three places to start:

Alert Slack when something you run is exploited

crontab · hourly

0 * * * *  curl -s "https://spydr.io/threats.json?q=nginx,postgres,openssl&exploited=1&since=1h" \
  | jq -r '.results[] | "*\(.id)* \(.severity) — \(.products[0] // "")\n\(.url)"' \
  | while read -r line; do
      curl -s -X POST -H 'content-type: application/json' \
        -d "$(jq -n --arg t "$line" '{text:$t}')" "$SLACK_WEBHOOK_URL"
    done

Fail a build when a critical CVE lands in your stack

.github/workflows/security.yml

- name: Spydr gate
  run: |
    code=$(curl -s -o hits.txt -w '%{http_code}' \
      "https://spydr.io/threats?q=django,celery,redis&cvss=9&since=1d&fail=1")
    case $code in
      200) echo "No new critical CVEs" ;;
      409) cat hits.txt; exit 1 ;;
      *)   echo "Spydr unavailable ($code)"; exit 2 ;;
    esac

Follow it in any feed reader

RSS

https://spydr.io/threats.rss?exploited=1
https://spydr.io/threats.rss?q=kubernetes&cvss=7
https://spydr.io/breaches.rss

The Security Skim

The week in security, in five minutes.

A short email every Tuesday: what’s being exploited, which breaches matter, and the one thing to patch before Friday. Written by people, not scraped.

Free. Hosted on Substack at securityskim.com.

Recent issues and long reads

11 Nov 2026
The Daily Skim: 2026-11-10 (on The Security Skim)
14 Oct 2026
So You Got Replaced by “Not AI.” What Now? (on The Security Skim)
1 Oct 2026
Keep the Damn Tiger in the Lab (on The Security Skim)

Everything on The Skim →