A new vulnerability just dropped;
you're the first to know.
Kolun watches the products your organization depends on around the clock and sends every new vulnerability — with CVSS, exploit probability (EPSS), KEV status and a summary — straight to your Telegram.
«New vulnerabilities every day; a new lock every day»
Remote code execution in a product you follow
An unauthenticated attacker can run code on the server. The flaw is already used in real attacks; an official patch is available.
For every product you choose, get new CVEs and related news on Telegram the moment they appear.
CVSS, EPSS and the KEV catalog combined, so noisy CVEs don't crowd out the urgent ones.
All versions of a product under one name; e.g. every Exchange update in one group.
Right now on Kolun
Full dashboard →Latest CVEs
AllNew in the KEV catalog
All- CVE-2026-19868 SonicWall SonicOS SSLVPN 2026-11-06
- CVE-2024-27834 Apple Multiple Products 2026-11-04
- CVE-2026-119977 WordPress WordPress Core 2026-11-03
- CVE-2026-118527 Ivanti Connect Secure 2026-10-30
- CVE-2026-111357 Ivanti Connect Secure 2026-10-30
- CVE-2026-97229 GitLab Community Edition and Enterprise Edition 2026-10-29
Most likely to be exploited (EPSS)
All- CVE-2026-109618 PHP Group PHP, Siemens AMIS TS, Siemens Energy Engage 99.9%
- CVE-2026-109619 PHP Group PHP, Siemens AMIS TS, Siemens Energy Engage 99.9%
- CVE-2026-104935 Ivanti Connect Secure 88.9%
- CVE-2026-111497 Google Brotli, Siemens Cloud Connector Configurator, Siemens Common Configurator on Device 82.6%
- CVE-2026-102764 BeyondTrust Remote Support 77.9%
- CVE-2026-110447 Collabora Online - Built-in CODE Server 73.3%
Capabilities
Everything you need to stay ahead of threats
From raw CVE data to actionable intelligence, on one platform.
Real-time CVE monitoring
Continuous feeds from CVE.org, CISA's KEV catalog and NVD; new CVEs are on Kolun minutes after publication.
Product-based Telegram alerts
Choose your products; get new CVEs and news about exactly those products on Telegram.
Exploit prediction (EPSS)
The probability each CVE gets exploited in the next 30 days; prioritize patches by real risk.
KEV catalog
Vulnerabilities exploited in real attacks right now, with remediation due dates and ransomware use.
Daily security news
The top cybersecurity news from trusted outlets, linked directly to the CVEs they mention.
API for developers
Use CVE, EPSS and KEV data in your own tools, SIEM and CI/CD pipelines.
How it works
Three steps to continuous vulnerability awareness
Build your product list
Search and follow the products and vendors your organization depends on.
Connect your Telegram
Connect the Kolun bot to your Telegram account in one click and set the minimum alert severity.
Stay ahead
Hear about new CVEs for your products as soon as they're published, with CVSS, EPSS, KEV and references in one place.
API Developers
Build on Kolun's data
A simple REST API with personal tokens and fair rate limits.
- Personal tokens — Each token is shown only once and stored as a hash.
- Practical filters — By product, severity, EPSS, KEV and publish date.
- News and CVEs together — Security news with linked CVEs.
# Critical, actively exploited CVEs for one product
import requests
r = requests.get(
"https://feeder.yektacloud.fun/api/v1/cves/",
headers={"Authorization": "Token kol_..."},
params={"product": "exchange server",
"min_cvss": 9, "kev": True},
)
for cve in r.json()["results"]:
print(cve["id"], cve["cvss_score"], cve["epss"])«Lock your systems with Kolun»
Choose your products and start getting security alerts on Telegram today.