Zero Day MonitorZDM

Dashboard Vulnerabilities Trending Zero-Days News About

Impressum Privacy Policy

Zero Day Monitor © 2026

3451 articles · 142163 vulns · 36/41 feeds (7d)

Latest Security News

Recently analyzed articles from 41 RSS feeds across official advisories, government CERTs, security research, and community sources.

Tier A: Official

Tier B: Gov CERT

Tier C: Research

Tier D: News

Tier E: Community

Status:

All Analyzed Queued Signal Only

B

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)

JPCERT/CC·clustered

B

Security Alert: Microsoft Releases February 2026 Security Updates

JPCERT/CC·clustered

B

Security Alert: Microsoft Releases April 2026 Security Updates

JPCERT/CC·clustered

B

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)

JPCERT/CC·clustered

B

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44)

JPCERT/CC·clustered

B

Security Alert: Microsoft Releases December 2025 Security Updates

JPCERT/CC·clustered

B

Security Alert: Microsoft Releases March 2026 Security Updates

JPCERT/CC·clustered

B

Security Alert: Microsoft Releases January 2026 Security Updates

JPCERT/CC·clustered

E

Expat 2.8.1 released, CVE-2026-45186 and CVSS unreliability

Lobsters Security·17m ago·clustered

B

JetBrains security advisory (AV26-445)

CCCS Canada·28m ago·clustered

C

CVE-2026-6146: Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys

oss-security·50m ago·clustered

C

CVE-2022-4988: Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries

oss-security·57m ago·clustered

C

Re: [oss-security][CVE-2026-7210] Cpython: The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

oss-security·1h ago·clustered

C

CVE-2026-45222 | steipete summarize up to 0.14.1 ~/.summarize/daemon.json permission assignment

VulDB·1h ago·clustered

C

CVE-2026-43968 | ninenines cowlib 2.6.0 crlf injection

VulDB·1h ago·clustered

C

CVE-2026-43969 | ninenines cowlib 2.9.0 crlf injection

VulDB·1h ago·clustered

C

CVE-2026-42866 | Alfredredbird tookie-osint up to 4.1fix modules/modules.py write_txt/write_csv/write_json/scan_file path traversal

VulDB·1h ago·clustered

C

CVE-2026-45224 | openclaw crabbox up to 0.8.x /workspace path traversal

VulDB·1h ago·clustered

C

CVE-2026-42864 | ManoManoTech firefighter-incident up to 0.0.53 jira_bot httpx.get missing authentication

VulDB·1h ago·clustered

C

CVE-2026-45223 | openclaw crabbox up to 0.8.x verifyUserToken authentication spoofing

VulDB·1h ago·clustered

C

CVE-2026-42871 | LabRedesCefetRJ WeGIA up to 3.6.x familiar_docfamiliar.php information disclosure

VulDB·1h ago·clustered

C

CVE-2026-7790 | ninenines cowlib up to 2.16.0 chunk-size resource consumption

VulDB·1h ago·clustered

C

CVE-2026-45109 | next.js App Router Application authentication bypass

VulDB·1h ago·clustered

C

CVE-2026-4892 | dnsmasq 2.92rel2 DHCPv6 heap-based overflow

VulDB·1h ago·clustered

C

CVE-2026-4891 | dnsmasq 2.92rel2 DNSSEC Validation out-of-bounds

VulDB·1h ago·clustered

C

CVE-2026-4890 | dnsmasq 2.92rel2 DNSSEC Validation infinite loop

VulDB·1h ago·clustered

C

CVE-2026-45005 | OpenClaw up to 2026.4.22 SecretRef operation after expiration (GHSA-q8ff-7ffm-m3r9)

VulDB·1h ago·clustered

C

CVE-2026-44998 | OpenClaw up to 2026.4.19 authorization (GHSA-qrp5-gfw2-gxv4)

VulDB·1h ago·clustered

C

CVE-2026-4893 | dnsmasq 2.92rel2 RFC 7871 Client Subnet Information information disclosure

VulDB·1h ago·clustered

C

CVE-2026-45004 | OpenClaw up to 2026.4.22 setup-api.js process.cwd uncontrolled search path (GHSA-r39h-4c2p-3jxp)

VulDB·1h ago·clustered

C

CVE-2026-45001 | OpenClaw up to 2026.4.19 Setting config.apply authorization (GHSA-7jm2-g593-4qrc)

VulDB·1h ago·clustered

C

CVE-2026-45000 | OpenClaw up to 2026.4.19 server-side request forgery (GHSA-j4c5-89f5-f3pm)

VulDB·1h ago·clustered

C

CVE-2026-5172 | dnsmasq 2.92rel2 DNS Response extract_addresses out-of-bounds write

VulDB·1h ago·clustered

C

CVE-2026-45006 | OpenClaw up to 2026.4.22 Configuration config.apply incomplete blacklist (GHSA-cwj3-vqpp-pmxr)

VulDB·1h ago·clustered

C

CVE-2026-45003 | OpenClaw up to 2026.4.21 Override Connector Endpoint confused deputy (GHSA-55cf-xx38-4p9p)

VulDB·1h ago·clustered

C

CVE-2026-44997 | OpenClaw up to 2026.4.21 privileges assignment (GHSA-q3jj-46pq-826r)

VulDB·1h ago·clustered

C

CVE-2026-44999 | OpenClaw up to 2026.4.19 data authenticity (GHSA-57r2-h2wj-g887)

VulDB·1h ago·clustered

C

CVE-2026-5266 | Wikimedia Echo up to 1.43.6/1.44.3/1.45.1 ApiEchoNotifications.Php information disclosure

VulDB·1h ago·clustered

C

CVE-2026-45002 | OpenClaw up to 2026.4.19 authorization (GHSA-2xcp-x87w-q377)

VulDB·1h ago·clustered

C

CVE-2026-38569 | HireFlow 1.2 candidate_detail.html cross site scripting

VulDB·1h ago·clustered

C

CVE-2026-42842 | getgrav grav/grav-plugin-form cross site scripting (GHSA-c2q3-p4jr-c55f)

VulDB·1h ago·clustered

C

CVE-2026-41250 | taigaio taiga-front up to 6.9.0 cross site scripting (GHSA-fpm6-3pvx-3c46)

VulDB·1h ago·clustered

C

CVE-2026-36906 | iotgateway 3.0.1 Log Record cross site scripting (ID 59)

VulDB·1h ago·clustered

C

CVE-2026-44777 | jqlang jq up to 1.8.2rc1 Ordinary Module Loader recursion (GHSA-rmpv-jgvr-wpr9)

VulDB·1h ago·clustered

C

CVE-2026-44413 | JetBrains TeamCity up to 2025.11.3 missing authentication

VulDB·1h ago·clustered

C

CVE-2026-44737 | getgrav grav-plugin-admin up to 1.10.49.5 URL cross site scripting (GHSA-fmg2-f5r9-24qc)

VulDB·1h ago·clustered

C

CVE-2026-42843 | getgrav grav-plugin-api up to 1.0.0-beta.14 UsersController::update authorization (GHSA-r945-h4vm-h736)

VulDB·1h ago·clustered

C

CVE-2026-38566 | HireFlow 1.2 POST Endpoint /profile SESSION_COOKIE_SAMESITE cross-site request forgery

VulDB·1h ago·clustered

C

CVE-2026-42845 | getgrav grav-plugin-form up to 9.0.x file inclusion (GHSA-w4rc-p66m-x6qq)

VulDB·1h ago·clustered

C

CVE-2026-42860 | openedx edx-enterprise up to 7.0.4 fetch_metadata_xml server-side request forgery (GHSA-64cv-vxpr-j6vc)

VulDB·1h ago·clustered

Articles are automatically fetched from RSS feeds, pre-filtered for security relevance, and analyzed by LLM for vulnerability extraction. View feed sources