Zero Day MonitorZDM

Dashboard Vulnerabilities Trending Zero-Days News About

Impressum Privacy Policy

Zero Day Monitor © 2026

2970 articles · 185100 vulns · 37/41 feeds (7d)

Zero-Days & Pre-CVE Events

Vulnerabilities detected from news before an official CVE-ID was assigned. These events are created via article clustering and LLM analysis.

Sort:newest trending critical

+ Report Zero-DayLogin to submit

Confirmed (≥0.85)

Likely (0.50–0.84)

Uncertain (<0.50)

hathornetwork · Fail-open authentication in hathor-wallet-headlessPRE-CVE

hathor-wallet-headless· CVSS 9.8· CWE-1188

cilium · Cilium ClusterNetworkPolicy matchExpressions Values Silently DroppedPRE-CVEEXPLOITEDPATCHED

clusternetworkpolicy· CVSS 9.6

Remote Code Execution Vulnerability in FlowisePRE-CVE

flowise· CVSS 9.0

vllm vulnerability allows remote arbitrary code execution with administrator privilegesPRE-CVE

vllm· CVSS 8.8

istio · Istio Wasm OCI Image Fetcher SSRF Bypass VulnerabilityPRE-CVEEXPLOITED

wasm oci image fetcher· CVSS 8.6· CWE-918

hewlett packard enterpri · Critical Vulnerabilities in HPE Unified OSS Console (UOC)PRE-CVEPATCHED

hpe unified oss console (uoc)· CVSS 8.4

kde · Multiple vulnerabilities in KDE Kdenlive and Okular allowing remote code execution, security bypass, data manipulation, information disclosure, and denial of servicePRE-CVE

kdenlive and okular· CVSS 8.4

Security Bypass Vulnerability in python-cryptographyPRE-CVE

python-cryptography· CVSS 8.0

samtools · Multiple Buffer Overflow and Overflow Vulnerabilities in HTSlib File Reading CodePRE-CVEPATCHED

htslib· CVSS 8.0· CWE-119

verizon communications · Missing IPsec Integrity Protection for IMS SIP Signaling in Verizon VoLTE DeploymentsPRE-CVE

ims volte network· CVSS 7.5· CWE-295

afchine · FreeHSM C Incorrect ECDSA Signature Handling VulnerabilityPRE-CVEPATCHED

freehsm c· CVSS 7.5· CWE-347

Multiple Vulnerabilities in PJSIP Allow Denial of Service and Data ManipulationPRE-CVE

pjsip· CVSS 7.5

Code Execution Vulnerability in vm2PRE-CVEEXPLOITED

vm2· CVSS 7.5· CWE-94

rsyslog · rsyslog imptcp regex-framing remote denial of servicePRE-CVEPATCHED

rsyslog· CVSS 7.5

synacor · Multiple Vulnerabilities in Synacor Zimbra Allow Information Disclosure, Cross-Site Scripting, and Security BypassPRE-CVE

zimbra· CVSS 7.2· CWE-79

jetstack · cert-manager Reflected SSRF via Vault Server ConfigurationPRE-CVE

cert-manager· CVSS 7.2

linux kernel · Local Privilege Escalation Vulnerability in Linux KernelPRE-CVEEXPLOITED

linux kernel· CVSS 7.0

Multiple Vulnerabilities in Rsync Allow Privilege Escalation, Information Disclosure, Security Bypass, and Denial of ServicePRE-CVE

rsync· CVSS 7.0

SQL Injection and Remote Code Execution Vulnerability in BudibasePRE-CVE

budibase· CVSS 7.0· CWE-89

Security Bypass Vulnerability in CoolifyPRE-CVE

coolify· CVSS 7.0

monitoring plugins · Heap Buffer Overflow in check_icmp due to Host Count OverflowPRE-CVEEXPLOITEDPATCHED

check_icmp· CVSS 7.0· CWE-190

Denial of Service Vulnerability in GogsPRE-CVE

gogs· CVSS 7.0

qemu project · Multiple Vulnerabilities in QEMU Allow Local Denial of ServicePRE-CVEEXPLOITED

qemu· CVSS 3.0