Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Found 130,263 fresh security advisories
Page 253 of 5,428
CVE-2026-60885 MEDIUM 6.8

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulner...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60882 MEDIUM 5.3

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulner...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60881 MEDIUM 6.5

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Meta Data). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60878 MEDIUM 4.4

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulne...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60876 MEDIUM 4.2

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). The supported version that is affected is 8.62. Difficult to exploit vulnerability ...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60874 MEDIUM 4.2

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability al...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60869 MEDIUM 6.8

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulner...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60839 MEDIUM 5.5

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability all...

📅 2026-10-20 Inspect Dossier →

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected are 8.61-8.63. Difficult to exploit vul...

📅 2026-10-20 Inspect Dossier →

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerabi...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60809 MEDIUM 4.2

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allow...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60746 MEDIUM 5.9

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vu...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60745 MEDIUM 4.4

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected are 8.61-8.63. Easily exploitable vulne...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60743 MEDIUM 6.5

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allow...

📅 2026-10-20 Inspect Dossier →

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker w...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60500 MEDIUM 5.8

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allow...

📅 2026-10-20 Inspect Dossier →
CVE-2026-60453 MEDIUM 5.3

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged att...

📅 2026-10-20 Inspect Dossier →

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows low privileged att...

📅 2026-10-20 Inspect Dossier →
CVE-2026-113812 CRITICAL 9.1

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a tr...

📅 2026-10-20 Inspect Dossier →

virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at a time across the compl...

📅 2026-10-20 Inspect Dossier →

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() even though fish interpret...

📅 2026-10-20 Inspect Dossier →

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handlers_for_template MCP t...

📅 2026-10-20 Inspect Dossier →

Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated namespace map at ever...

📅 2026-10-20 Inspect Dossier →

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname with one DNS lookup and...

📅 2026-10-20 Inspect Dossier →
Showing Page 253 of 5,428 • 130,263 newly disclosed advisories