Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Quick Filters: Critical (9.0+) High (7.0+) Remote Exploits (AV:N)

Found 65,059 fresh security advisories

Page 348 of 2,711

CVE-2025-69121 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69119 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69118 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69117 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69116 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69114 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69113 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69112 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69110 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69109 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69108 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69107 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Rosaleen <= 2.8 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69105 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69104 HIGH 7.1

CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in Qreatix <= 1.9.4 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-69103 HIGH 7.5

CWE-862 Remote (AV:N)

Subscriber Arbitrary Content Deletion in Brikk <= 3.0.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-62340 CVSS 3.1

hcltech/icontrol CWE-613 Remote (AV:N)

HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to automatically terminate user sessions after a period ...

📅 2026-06-17 Inspect Dossier →

CVE-2025-60223 HIGH 7.7

CWE-22 Remote (AV:N)

Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-60218 CRITICAL 9.9

CWE-434 Remote (AV:N)

Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-60205 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-60085 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in Learnify <= 1.15.0 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-59872 MEDIUM 4.3

hcltech/zie_for_web CWE-209 Remote (AV:N)

HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, If the server is configured to execute code, then it may be possible to obtain command execution on the server by uploading a ...

📅 2026-06-17 Inspect Dossier →

CVE-2025-59563 HIGH 8.8

CWE-266 Remote (AV:N)

Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-59560 HIGH 7.1

CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in Sonaar <= 4.27.4 versions....

📅 2026-06-17 Inspect Dossier →

CVE-2025-58954 HIGH 8.1

CWE-98 Remote (AV:N)

Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions....

📅 2026-06-17 Inspect Dossier →

Showing Page 348 of 2,711 • 65,059 newly disclosed advisories

← Previous Next →