Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 11,814 fresh security advisories
Page 8 of 493
CVE-2026-105489 CRITICAL 9.9

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the c...

📅 2026-10-27 Inspect Dossier →
CVE-2026-104354 CRITICAL 9.1

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the c...

📅 2026-10-27 Inspect Dossier →
CVE-2026-104353 CRITICAL 9.9

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in...

📅 2026-10-27 Inspect Dossier →
CVE-2026-104351 CRITICAL 9.9

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user....

📅 2026-10-27 Inspect Dossier →
CVE-2026-104350 CRITICAL 9.3

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially ...

📅 2026-10-27 Inspect Dossier →
CVE-2026-116863 CRITICAL 9.6

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2....

📅 2026-10-27 Inspect Dossier →
CVE-2026-78845 CRITICAL 9.8

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root descript...

📅 2026-10-27 Inspect Dossier →
CVE-2026-117920 CRITICAL 9.6

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6....

📅 2026-10-27 Inspect Dossier →
CVE-2026-117917 CRITICAL 9.8

Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6....

📅 2026-10-27 Inspect Dossier →
CVE-2026-117868 CRITICAL 9.6

Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6....

📅 2026-10-27 Inspect Dossier →
CVE-2026-117862 CRITICAL 9.8

Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderb...

📅 2026-10-27 Inspect Dossier →
CVE-2026-117861 CRITICAL 9.6

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6....

📅 2026-10-27 Inspect Dossier →
CVE-2026-117564 CRITICAL 9.8

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production...

📅 2026-10-27 Inspect Dossier →
CVE-2026-65145 CRITICAL 10.0

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tamperin...

📅 2026-10-27 Inspect Dossier →
CVE-2026-112362 CRITICAL 9.1

@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes option enabled, the plu...

📅 2026-10-27 Inspect Dossier →
CVE-2026-117532 CRITICAL 9.8

REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers ca...

📅 2026-10-27 Inspect Dossier →
CVE-2026-86577 CRITICAL 9.4

Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 be...

📅 2026-10-27 Inspect Dossier →
CVE-2026-86576 CRITICAL 9.4

Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 1...

📅 2026-10-27 Inspect Dossier →
CVE-2026-86575 CRITICAL 9.4

Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from ...

📅 2026-10-27 Inspect Dossier →
CVE-2026-82122 CRITICAL 9.4

Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Add...

📅 2026-10-27 Inspect Dossier →
CVE-2026-82120 CRITICAL 9.8

Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Addi...

📅 2026-10-27 Inspect Dossier →
CVE-2026-82119 CRITICAL 9.8

OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional...

📅 2026-10-27 Inspect Dossier →
Showing Page 8 of 493 • 11,814 newly disclosed advisories