Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)

Found 11,973 fresh security advisories

Page 209 of 499

CVE-2026-48886 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-48881 CRITICAL 9.1

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-48836 CRITICAL 10.0

CWE-94 Remote (AV:N)

Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-45439 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-42665 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-42639 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-42386 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-42381 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-40798 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-40772 CRITICAL 10.0

CWE-434 Remote (AV:N)

Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-40771 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39591 CRITICAL 9.9

CWE-434 Remote (AV:N)

Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39583 CRITICAL 9.8

CWE-266 Remote (AV:N)

Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39530 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39519 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39512 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39511 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39502 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39493 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39492 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39465 CRITICAL 9.1

CWE-94 Remote (AV:N)

Editor Remote Code Execution (RCE) in Responsive Slider by MetaSlider <= 3.106.0 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39441 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-34901 CRITICAL 9.8

CWE-266 Remote (AV:N)

Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-27053 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions....

📅 2026-06-15 Inspect Dossier →

Showing Page 209 of 499 • 11,973 newly disclosed advisories

← Previous Next →