Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 11,828 fresh security advisories
Page 121 of 493
CVE-2026-28672 CRITICAL 9.8

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8....

📅 2026-08-10 Inspect Dossier →
CVE-2026-19348 CRITICAL 9.8

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&nam...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71993 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. ...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71992 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71991 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary c...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71990 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary comm...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71989 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected devic...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71988 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. A...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71987 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Atta...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71986 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Atta...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71985 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected de...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71984 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device...

📅 2026-08-09 Inspect Dossier →
CVE-2026-71983 CRITICAL 9.8

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious ...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71958 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly ...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71957 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71956 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary m...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71955 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arb...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71954 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote at...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71953 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inj...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71952 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attac...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71951 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker c...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71950 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker c...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71949 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker c...

📅 2026-08-08 Inspect Dossier →
CVE-2026-71948 CRITICAL 9.8

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote a...

📅 2026-08-08 Inspect Dossier →
Showing Page 121 of 493 • 11,828 newly disclosed advisories