Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 265 of 2,711
CVE-2026-13561 MEDIUM 6.3
CWE-77 Remote (AV:N)

A vulnerability was detected in Edimax EW-7478APC 1.04. The impacted element is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. The manipulation of ...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13560 MEDIUM 6.3
CWE-77 Remote (AV:N)

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipula...

📅 2026-06-29 Inspect Dossier →
CWE-74 Remote (AV:N)

A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executing a manipulation of the argument ID can l...

📅 2026-06-29 Inspect Dossier →
CWE-79 Remote (AV:N)

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /report/addreport of the component Report Handler. Performing a...

📅 2026-06-29 Inspect Dossier →
CWE-22 Remote (AV:N)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal. This issue affects Embed Privacy: from n/a through 1.12.3....

📅 2026-06-29 Inspect Dossier →
opensuse/libzypp CWE-23 Remote (AV:N)

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading ...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13557 MEDIUM 4.3
CWE-79 Remote (AV:N)

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/mod_room/controller.php?action=add of the component POST R...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13556 MEDIUM 4.3
CWE-79 Remote (AV:N)

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/mod_users/controller.php?action=edit of the component POST Request Ha...

📅 2026-06-29 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/mod_users/controller.php?action=add. The manipulat...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13554 MEDIUM 4.3
CWE-79 Remote (AV:N)

A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/mod_amenities/controller.php?action=add...

📅 2026-06-29 Inspect Dossier →
CWE-284 Remote (AV:N)

A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown function of the file /admin/mod_amenities/controller.php?action=add. Executing a manipulation of the ar...

📅 2026-06-29 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_amenities/controller.php?action=edit. Performing a manipulation...

📅 2026-06-29 Inspect Dossier →
CVE-2026-57676 MEDIUM 4.3
CWE-639 Remote (AV:N)

Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User Avatar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple Us...

📅 2026-06-29 Inspect Dossier →
CWE-74 Remote (AV:N)

A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file /editBaptism.php. Such manipulation of the argument I...

📅 2026-06-29 Inspect Dossier →
CWE-74 Remote (AV:N)

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /delbaptism.php. This manipulation of the argument ID ...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13549 MEDIUM 5.4
CWE-285 Remote (AV:N)

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php of the component Repo...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13548 MEDIUM 6.3
CWE-74 Remote (AV:N)

A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The manipulation of the argument editid leads to sql inje...

📅 2026-06-29 Inspect Dossier →
CWE-284 Remote (AV:N)

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Executing a manipulation ...

📅 2026-06-29 Inspect Dossier →
CWE-287 Remote (AV:N)

A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API Endpoint. Performing a manipulation results in missing a...

📅 2026-06-29 Inspect Dossier →
dlink/dcs-935l_firmware CWE-77 Remote (AV:N)

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID l...

📅 2026-06-29 Inspect Dossier →
CVE-2026-9676 MEDIUM 4.3
Remote (AV:N)

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and a...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13544 MEDIUM 6.3
CWE-266 Remote (AV:N)

A flaw has been found in Feehi CMS up to 2.1.1. Affected by this issue is some unknown functionality of the file /api/users of the component API. This manipulation causes improper access controls. The...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13543 MEDIUM 5.6
CWE-287 Remote (AV:N)

A vulnerability was detected in Documenso up to 2.11.0. Affected by this vulnerability is an unknown functionality of the file packages/auth/server/lib/utils/handle-oauth-callback-url.ts of the compon...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13542 MEDIUM 6.3
CWE-74 Remote (AV:N)

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname l...

📅 2026-06-29 Inspect Dossier →
Showing Page 265 of 2,711 • 65,059 newly disclosed advisories