Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)
Found 65,059 fresh security advisories
Page 19 of 2,711
CVE-2026-65537 MEDIUM 4.3
CWE-862 Remote (AV:N)

Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions....

📅 2026-07-23 Inspect Dossier →
CVE-2026-65536 MEDIUM 6.5
CWE-352 Remote (AV:N)

Unauthenticated Cross Site Request Forgery (CSRF) in افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) <= 4.4.5 versions....

📅 2026-07-23 Inspect Dossier →
CVE-2026-65534 MEDIUM 5.9
CWE-79 Remote (AV:N)

Author Cross Site Scripting (XSS) in Custom links in Elementor Image Carousel <= 1.1.1 versions....

📅 2026-07-23 Inspect Dossier →
CVE-2026-65529 MEDIUM 5.3
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Configured Access Control Security L...

📅 2026-07-23 Inspect Dossier →
CVE-2026-65526 HIGH 8.5
CWE-89 Remote (AV:N)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through ...

📅 2026-07-23 Inspect Dossier →
CVE-2026-65522 MEDIUM 6.5
CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions....

📅 2026-07-23 Inspect Dossier →
CVE-2026-65518 MEDIUM 6.5
CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions....

📅 2026-07-23 Inspect Dossier →
CVE-2026-65516 HIGH 7.2
CWE-918 Remote (AV:N)

Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions....

📅 2026-07-23 Inspect Dossier →
CVE-2026-65512 MEDIUM 5.4
CWE-352 Remote (AV:N)

Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4...

📅 2026-07-23 Inspect Dossier →
CVE-2026-65511 HIGH 7.1
CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions....

📅 2026-07-23 Inspect Dossier →
Showing Page 19 of 2,711 • 65,059 newly disclosed advisories
← Previous Next →