Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)

Found 11,814 fresh security advisories

Page 26 of 493

CVE-2026-62124 CRITICAL 9.8

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62123 CRITICAL 9.8

Unauthenticated PHP Object Injection in Invetex <= 2.18 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62120 CRITICAL 9.8

Unauthenticated PHP Object Injection in Law Office <= 3.20 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62090 CRITICAL 9.8

Unauthenticated PHP Object Injection in WineShop <= 3.20 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62087 CRITICAL 9.8

Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62086 CRITICAL 9.8

Unauthenticated PHP Object Injection in Juno <= 2.25 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62077 CRITICAL 9.8

Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62076 CRITICAL 9.8

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62054 CRITICAL 9.8

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62053 CRITICAL 9.8

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62052 CRITICAL 9.8

Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62051 CRITICAL 9.8

Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62050 CRITICAL 9.8

Unauthenticated PHP Object Injection in Splendour <= 1.23 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62032 CRITICAL 9.8

Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62031 CRITICAL 9.3

Unauthenticated SQL Injection in uListing <= 2.2.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62025 CRITICAL 9.0

Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62024 CRITICAL 9.9

Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62022 CRITICAL 9.8

Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42723 CRITICAL 9.8

Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42719 CRITICAL 9.8

Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42718 CRITICAL 9.8

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42716 CRITICAL 9.8

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42696 CRITICAL 10.0

Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Incl...

📅 2026-10-10 Inspect Dossier →

CVE-2026-40800 CRITICAL 9.3

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions....

📅 2026-10-10 Inspect Dossier →

Showing Page 26 of 493 • 11,814 newly disclosed advisories

← Previous Next →