A software security flaw that is unknown to the vendor and has no available patch, leaving systems exposed to potential exploitation until a fix is developed and deployed.