Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)

Found 65,059 fresh security advisories

Page 337 of 2,711

CVE-2026-40720 HIGH 7.1

CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39590 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Atomlab <= 2.4.5 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39576 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in SingleMalt <= 1.5 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39560 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39559 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Uppercase < 1.2.2 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39556 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Konsept <= 1.9 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39523 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39445 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39442 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69189 HIGH 7.3

CWE-862 Remote (AV:N)

Missing Authorization vulnerability in EMV JobBank allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobBank: from n/a through 1.2.3....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69175 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69174 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Etude <= 1.6 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69170 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69166 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69164 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Skyward <= 1.10 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69158 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Granola <= 1.13 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69157 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Gamic <= 1.15 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69144 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Preservation <= 1.10 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69140 HIGH 7.1

CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69130 HIGH 8.8

CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affects Entrepreneur - Bo...

📅 2026-06-17 Inspect Dossier →

CVE-2025-69128 HIGH 8.6

CWE-22 Remote (AV:N)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69127 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69126 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69123 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions....

📅 2026-06-17 Inspect Dossier →

Showing Page 337 of 2,711 • 65,059 newly disclosed advisories

← Previous Next →