Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Found 130,319 fresh security advisories
Page 287 of 5,430
CVE-2026-42026 CRITICAL 9.1

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially cra...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-42025 CRITICAL 9.1

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially cra...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-42024 CRITICAL 9.1

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially ...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-42023 CRITICAL 9.1

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially ...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-42022 CRITICAL 9.1

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially ...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-42021 CRITICAL 9.1

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially ...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-42020 CRITICAL 9.1

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request ca...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-42019 CRITICAL 9.1

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request ca...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-41223 CRITICAL 9.1

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request c...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-41222 CRITICAL 9.1

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-40627 CRITICAL 9.1

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arb...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-40615 CRITICAL 9.1

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP requ...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-35499 CRITICAL 9.1

An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbit...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-33568 CRITICAL 9.1

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-28763 CRITICAL 9.1

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-112712 CRITICAL 9.1

@fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() function joined a path-scoped middleware's mount path to the plugin scope prefix in ...

šŸ“… 2026-10-20 Inspect Dossier →

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source rep...

šŸ“… 2026-10-20 Inspect Dossier →

markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) with default options. Co...

šŸ“… 2026-10-20 Inspect Dossier →

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing....

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-10141 CRITICAL 9.1

A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware binary can lead to arbi...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-10139 CRITICAL 9.1

A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary co...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-10138 CRITICAL 9.1

A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitra...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-10137 CRITICAL 9.1

A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to ...

šŸ“… 2026-10-20 Inspect Dossier →
CVE-2026-10136 CRITICAL 9.1

A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to a...

šŸ“… 2026-10-20 Inspect Dossier →
Showing Page 287 of 5,430 • 130,319 newly disclosed advisories