Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 267 of 2,711
CVE-2026-13520 MEDIUM 6.3
CWE-74 Remote (AV:N)

A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php of the component Appointment Handler. This manipulat...

📅 2026-06-29 Inspect Dossier →
CWE-119 Remote (AV:N)

A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based ...

📅 2026-06-29 Inspect Dossier →
CWE-119 Remote (AV:N)

A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer ov...

📅 2026-06-29 Inspect Dossier →
CWE-119 Remote (AV:N)

A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /goform/WifiBasicSet. Executing a manipulation of the argument security_5g can lead ...

📅 2026-06-29 Inspect Dossier →
CWE-119 Remote (AV:N)

A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument shareSpe...

📅 2026-06-29 Inspect Dossier →
CWE-119 Remote (AV:N)

A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads ...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13513 MEDIUM 5.0
CWE-345 Remote (AV:N)

A security flaw has been discovered in MyScale MyScaleDB up to 1.8.0. This vulnerability affects the function SegmentId::getCacheKey in the library src/VectorIndex/Common/SegmentId.h. The manipulation...

📅 2026-06-29 Inspect Dossier →
CVE-2026-13512 MEDIUM 6.3
CWE-285 Remote (AV:N)

A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::state_key of the file src/query/service/src/servers/http/v1/session/client_session_man...

📅 2026-06-28 Inspect Dossier →
CWE-266 Remote (AV:N)

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the com...

📅 2026-06-28 Inspect Dossier →
CWE-327 Remote (AV:N)

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password ...

📅 2026-06-28 Inspect Dossier →
CVE-2026-13509 MEDIUM 6.3
CWE-22 Remote (AV:N)

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controllers/files.py of the component Know...

📅 2026-06-28 Inspect Dossier →
CVE-2026-13508 MEDIUM 5.5
CWE-285 Remote (AV:N)

A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing Handler. This manipulation of...

📅 2026-06-28 Inspect Dossier →
CVE-2026-13507 MEDIUM 5.0
CWE-345 Remote (AV:N)

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file openviking/storage/vectordb/utils/str_to_uint64.py of the component Local Vector...

📅 2026-06-28 Inspect Dossier →
CVE-2026-49048 CRITICAL 9.8
joomcoder/joomcck CWE-89 Remote (AV:N)

The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string without escaping or p...

📅 2026-06-28 Inspect Dossier →
CWE-79 Remote (AV:N)

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads...

📅 2026-06-28 Inspect Dossier →
CVE-2026-13503 MEDIUM 5.3
CWE-22 Remote (AV:N)

A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component to...

📅 2026-06-28 Inspect Dossier →
CWE-74 Remote (AV:N)

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handl...

📅 2026-06-28 Inspect Dossier →
CVE-2026-13499 MEDIUM 4.3
CWE-79 Remote (AV:N)

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file login_register.php of the component Registration Handler. Performing ...

📅 2026-06-28 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpassword.php of the component POST Parameter Handler. Such manipula...

📅 2026-06-28 Inspect Dossier →
CVE-2026-13497 MEDIUM 6.3
CWE-74 Remote (AV:N)

A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /appointment.php. This manipulation of the argument editid causes...

📅 2026-06-28 Inspect Dossier →
CVE-2026-13496 MEDIUM 6.3
CWE-74 Remote (AV:N)

A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /ajaxmedicine.php. The manipulation of the argument medicineid results...

📅 2026-06-28 Inspect Dossier →
CVE-2026-13495 MEDIUM 4.7
CWE-74 Remote (AV:N)

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /adminprofile.php. The manipulation of the argument loginid leads to sql inje...

📅 2026-06-28 Inspect Dossier →
CWE-99 Remote (AV:N)

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file backend/controller/conversation_api.py of the component Workflow Checkpoint Restor...

📅 2026-06-28 Inspect Dossier →
CWE-404 Remote (AV:N)

A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetInstance of the file main/protocols/mqtt_protocol.cc of the component MQTT Goodbye...

📅 2026-06-28 Inspect Dossier →
Showing Page 267 of 2,711 • 65,059 newly disclosed advisories