Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)

Found 65,059 fresh security advisories

Page 343 of 2,711

CVE-2026-39549 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39548 HIGH 7.1

CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39547 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Getaway < 1.8 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39546 HIGH 7.6

CWE-266 Remote (AV:N)

Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39545 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39539 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39537 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39529 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39522 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Solene <= 3.4 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39446 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39443 HIGH 8.1

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39438 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-39433 MEDIUM 6.5

CWE-862 Remote (AV:N)

Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-34895 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-34894 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-34893 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-34888 HIGH 7.5

CWE-201 Remote (AV:N)

Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-32967 CRITICAL 9.1

apache/dolphinscheduler CWE-863 Remote (AV:N)

Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to versio...

📅 2026-06-17 Inspect Dossier →

CVE-2026-32966 CRITICAL 9.8

apache/dolphinscheduler CWE-863 Remote (AV:N)

DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommen...

📅 2026-06-17 Inspect Dossier →

CVE-2026-27429 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-27410 MEDIUM 6.5

CWE-502 Remote (AV:N)

Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-27400 HIGH 8.6

CWE-22 Remote (AV:N)

Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-27395 CRITICAL 9.8

CWE-266 Remote (AV:N)

Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2026-27041 CRITICAL 9.9

CWE-434 Remote (AV:N)

Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions....

📅 2026-06-17 Inspect Dossier →

Showing Page 343 of 2,711 • 65,059 newly disclosed advisories

← Previous Next →