Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 11,814 fresh security advisories
Page 41 of 493
CVE-2023-54400 CRITICAL 9.8

Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getE...

📅 2026-09-29 Inspect Dossier →
CVE-2026-49243 CRITICAL 9.6

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that...

📅 2026-09-29 Inspect Dossier →
CVE-2026-82973 CRITICAL 9.4

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentication is not configur...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100829 CRITICAL 9.6

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157....

📅 2026-09-29 Inspect Dossier →
CVE-2026-100828 CRITICAL 9.6

Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157....

📅 2026-09-29 Inspect Dossier →
CVE-2026-100819 CRITICAL 9.6

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Fire...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100818 CRITICAL 9.6

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox E...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100811 CRITICAL 9.6

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Fire...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100804 CRITICAL 9.6

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157....

📅 2026-09-29 Inspect Dossier →
CVE-2026-100800 CRITICAL 9.6

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157....

📅 2026-09-29 Inspect Dossier →
CVE-2026-100794 CRITICAL 9.6

Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100788 CRITICAL 9.8

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100787 CRITICAL 9.6

Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157....

📅 2026-09-29 Inspect Dossier →
CVE-2026-100786 CRITICAL 9.6

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115....

📅 2026-09-29 Inspect Dossier →
CVE-2026-100781 CRITICAL 9.6

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fir...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100778 CRITICAL 9.6

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100775 CRITICAL 9.6

Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 14...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100770 CRITICAL 9.6

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Fi...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100763 CRITICAL 9.1

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157....

📅 2026-09-29 Inspect Dossier →
CVE-2026-100762 CRITICAL 9.6

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Fi...

📅 2026-09-29 Inspect Dossier →
CVE-2026-100760 CRITICAL 9.6

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157....

📅 2026-09-29 Inspect Dossier →
CVE-2026-100758 CRITICAL 9.6

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox...

📅 2026-09-29 Inspect Dossier →
CVE-2026-8066 CRITICAL 9.1

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the devic...

📅 2026-09-29 Inspect Dossier →
Showing Page 41 of 493 • 11,814 newly disclosed advisories