Skip to main content

Looking for folks to test open-source CVE feed and prioritisation tool

0
Medium
Published: 10/14/2026 (10/14/2026, 10:38:23 UTC)
Source: Reddit Cybersecurity

Description

This is a promotional post seeking testers for an open-source tool designed to ingest multiple vulnerability feeds and prioritize CVEs based on exploitation risk and other factors. The tool aims to help users rank vulnerabilities for remediation efforts more effectively. It is currently implemented as a Cloudflare worker with plans for a Docker version.

Reddit Discussion

r/cybersecurity·posted by u/Minimum_Cap5929
00

As we all know, AI is now making things even more hectic with vulnerability management and prioritisation.

So I've built a tool that regularly ingests all major feeds (CVE, CISA KEV, EPSS, OSV, GitHub Advisory Database and EoL). Then looks at exploitation risk, rate of change of exploitation risk, EoL and age of CVE to help rank and prioritise which ones to action first.

Either enter a stack (loosely or described in detail)
Or, enter a list of CVEs.

Currently its built as a Cloudflare worker with a D1 database. I have plans to create a docker version of this. There are more tweaks coming, but if you have any questions or feedback let me know!

https://vulnder.com/

https://github.com/fullymiddleaged/vulnder

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 10/14/2026, 10:48:21 UTC

Technical Analysis

The post describes a newly developed open-source vulnerability feed and prioritization tool that aggregates data from major sources such as CVE, CISA KEV, EPSS, OSV, GitHub Advisory Database, and EoL lists. It analyzes exploitation risk, changes in risk, end-of-life status, and CVE age to rank vulnerabilities for prioritization. The tool is cloud-hosted via Cloudflare Workers and uses a D1 database, with plans for a containerized version. No specific vulnerability or exploit is described.

Potential Impact

No direct security impact or vulnerability is described. The content relates to a tool intended to assist with vulnerability management and prioritization, not a security threat or exploit.

Defensive Guidance

Not applicable, as this is not a vulnerability or threat but a tool announcement seeking testers.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Source Type
reddit
Subreddit
cybersecurity
Reddit Score
0
Discussion Level
minimal
Content Source
reddit_link_post
Post Type
link
Newsworthiness Assessment
{"score":30,"reasons":["external_link","newsworthy_keywords:rce","established_author","very_recent"],"isNewsworthy":true,"foundNewsworthy":["rce"]}
Has External Source
true
Trusted Domain
false

Threat ID: 6acf5df22cdf04f6566e28d3

Added to database: 10/14/2026, 10:48:18 UTC

Last enriched: 10/14/2026, 10:48:21 UTC

Last updated: 10/15/2026, 02:48:14 UTC

Views: 16

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses