Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)

Found 65,059 fresh security advisories

Page 342 of 2,711

CVE-2026-40736 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-40735 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Reina <= 2.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-40731 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-40726 HIGH 8.2

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-40725 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-40724 MEDIUM 6.5

CWE-22 Remote (AV:N)

CP Client Arbitrary File Download in Client Portal (Pro) <= 5.6.2 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-40723 MEDIUM 4.3

CWE-862 Remote (AV:N)

Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-40722 MEDIUM 5.5

CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Yoast SEO Premium: from n/a through 26.6....

📅 2026-06-17 Inspect Dossier →

CVE-2026-40721 HIGH 7.5

CWE-98 Remote (AV:N)

Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39598 HIGH 8.0

CWE-434 Remote (AV:N)

Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39597 HIGH 7.1

CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor <= 1.3.4 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39596 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39595 MEDIUM 4.7

CWE-862 Remote (AV:N)

Author Broken Access Control in W3 Total Cache <= 2.9.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39589 CRITICAL 9.9

CWE-434 Remote (AV:N)

Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39582 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39580 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39578 MEDIUM 5.5

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Valiance <= 1.2 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39577 MEDIUM 5.5

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39573 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39568 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39567 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39558 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Malmö <= 2.2 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39557 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39554 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions....

📅 2026-06-17 Inspect Dossier →

Showing Page 342 of 2,711 • 65,059 newly disclosed advisories

← Previous Next →