Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)

Found 65,059 fresh security advisories

Page 22 of 2,711

CVE-2026-65456 MEDIUM 4.3

CWE-639 Remote (AV:N)

Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65455 CRITICAL 9.1

CWE-434 Remote (AV:N)

Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65454 HIGH 8.5

CWE-89 Remote (AV:N)

Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65453 MEDIUM 5.3

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65452 MEDIUM 5.3

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65451 HIGH 8.5

CWE-89 Remote (AV:N)

Contributor SQL Injection in MapSVG <= 8.14.0 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65450 HIGH 8.5

CWE-89 Remote (AV:N)

Contributor SQL Injection in MapSVG <= 8.14.0 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65449 MEDIUM 6.5

CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-64815 HIGH 8.1

CWE-94 Remote (AV:N)

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files...

📅 2026-07-23 Inspect Dossier →

CVE-2026-64814 HIGH 8.6

CWE-862 Remote (AV:N)

In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...

📅 2026-07-23 Inspect Dossier →

CVE-2026-64813 CRITICAL 10.0

CWE-602 Remote (AV:N)

In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session...

📅 2026-07-23 Inspect Dossier →

CVE-2026-64812 CRITICAL 10.0

CWE-306 Remote (AV:N)

In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session...

📅 2026-07-23 Inspect Dossier →

CVE-2026-64810 MEDIUM 4.3

CWE-79 Remote (AV:N)

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...

📅 2026-07-23 Inspect Dossier →

CVE-2026-64800 CVSS 3.5

CWE-532 Remote (AV:N)

In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default...

📅 2026-07-23 Inspect Dossier →

CVE-2026-61981 MEDIUM 5.4

CWE-352 Remote (AV:N)

Unauthenticated Cross Site Request Forgery (CSRF) in Simple Link Directory Pro <= 15.0.8 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61973 MEDIUM 4.3

CWE-862 Remote (AV:N)

Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61972 MEDIUM 5.3

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61954 HIGH 7.5

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61951 CRITICAL 9.8

CWE-266 Remote (AV:N)

Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61950 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61949 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Bookly <= 27.7 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61948 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61947 HIGH 7.1

CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-61946 MEDIUM 6.5

CWE-639 Remote (AV:N)

Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments <= 3.12.27 versions....

📅 2026-07-23 Inspect Dossier →

Showing Page 22 of 2,711 • 65,059 newly disclosed advisories

← Previous Next →