Zero Day Monitor

Zero Day MonitorZDM

Dashboard Vulnerabilities Trending Zero-Days News About

Impressum Privacy Policy

Zero Day Monitor © 2026

4357 articles · 196326 vulns · 36/41 feeds (7d)

193,630 vulnerabilities total

Microsoft · CVE-2026-69836 — Microsoft Entra ID Remote Code Execution VulnerabilityKEVEXPLOITEDPATCHED

Microsoft Entra· CVSS 10.0· CWE-502

linux · CVE-2026-31431 — crypto: algif_aead - Revert to operating out-of-placeKEVEXPLOITEDPATCHED

linux_kernel· CVSS 7.8

trueconf · CVE-2026-72529 — CVE-2026-72529: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4KEVEXPLOITEDPATCHED

trueconf_server· CVSS 9.8· CWE-306

trueconf · CVE-2026-3502 — TrueConf Client Update Integrity Verification BypassKEVEXPLOITED

trueconf· CVSS 7.8· CWE-494

trueconf · CVE-2026-72530 — CVE-2026-72530: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4KEVEXPLOITEDPATCHED

trueconf_server· CVSS 9.0· CWE-94

synacor · CVE-2026-73570 — CVE-2026-73570: A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp KEVEXPLOITEDPATCHED

zimbra_collaboration_suite· CVSS 8.9· CWE-78

arm · CVE-2022-38181 — The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through KEVEXPLOITED

bifrost_gpu_kernel_driver· CVSS 8.8· CWE-416

progress · CVE-2023-34362 — In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit TransfeKEVEXPLOITEDPATCHED

moveit_cloud· CVSS 9.8· EPSS 0.94· CWE-89

citrix · CVE-2026-8451 — Insufficient input validation leading to memory overreadKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller· CVSS 8.8· CWE-125

lfprojects · CVE-2026-64849 — MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)KEVEXPLOITEDPATCHED

mlflow· CVSS 9.3· CWE-918

apple · CVE-2026-65400 — CVE-2026-65400: An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOSKEVEXPLOITEDPATCHED

macos· CVSS 9.8· CWE-20

microsoft · CVE-2026-55040 — Microsoft SharePoint Server Security Feature Bypass VulnerabilityKEVEXPLOITEDPATCHED

sharepoint_server· CVSS 9.1· CWE-1390

siemens · CVE-2023-44487 — CVE-2023-44487: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset manyKEVEXPLOITEDPATCHED

simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware· CVSS 7.5

vmware · CVE-2026-59310 — vCenter directory-traversal vulnerabilityKEVEXPLOITEDPATCHED

vcenter_server· CVSS 9.8· CWE-22

gogs · CVE-2026-52813 — Gogs: Path Traversal in organization name results in RCE through Git hooksKEVEXPLOITEDPATCHED

gogs· CVSS 10.0· CWE-23

f5 · CVE-2026-42945 — NGINX ngx_http_rewrite_module vulnerabilityKEVEXPLOITEDPATCHED

dos· CVSS 8.1· CWE-122

ptc · CVE-2026-12569 — Remote Code Execution (RCE) vulnerability in Windchill PDMlinkKEVEXPLOITEDPATCHED

flexplm· CWE-20

microsoft · CVE-2026-50522 — Microsoft SharePoint Remote Code Execution VulnerabilityKEVEXPLOITEDPATCHED

sharepoint_server· CVSS 9.8· CWE-502

spip · CVE-2026-77806 — CVE-2026-77806: SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in AugustKEVEXPLOITEDPATCHED

spip· CVSS 9.8· CWE-94

microsoft · CVE-2026-45659 — Microsoft SharePoint Remote Code Execution VulnerabilityKEVEXPLOITEDPATCHED

sharepoint_server· CVSS 8.8· CWE-502