Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
8277 articles · 242143 vulns · 36/41 feeds (7d)
32
+4 today
Exploited (7d)
257
+7 today
Critical (7d)
1916
CISA KEV
403
Pre-CVE
8277
+883 today
Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending
Ranked by source count
Zero-Days
Pre-CVE detection
Verification
Community-driven
Open Source
AGPL-3.0 licensed
Learn more about the projectSign in for personalized features

Vulnerabilities

—
citrix · CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsKEVEXPLOITEDPATCHED
netscaler_application_delivery_controller· CWE-20
161🔥
31 art.
0
Sep 27, 2026
—
citrix · CVE-2026-88779 — Memory overflow vulnerability leading to Denial of ServiceKEVEXPLOITED
PATCHED
netscaler_application_delivery_controller
156🔥
19 art.
0
Oct 4, 2026
8.8
microsoft · CVE-2026-96951 — Windows Shell Security Feature Bypass VulnerabilityKEVEXPLOITEDPATCHED
outlook_web· CVSS 8.8· CWE-77
132🔥
17 art.
0
Oct 13, 2026
7.2
plex · CVE-2026-96656 — Plex Media Server arbitrary file writeKEVEXPLOITEDPATCHED
media server· CVSS 7.2· CWE-73
111🔥
2 art.
0
Sep 23, 2026
6.5
plex · CVE-2026-96654 — Plex Media Server URL injectionKEVEXPLOITEDPATCHED
media server· CVSS 6.5· CWE-84
103🔥
2 art.
0
Sep 23, 2026
4.3
plex · CVE-2026-96652 — Plex Media Server SSRFKEVEXPLOITEDPATCHED
media server· CVSS 4.3· CWE-918
103🔥
2 art.
0
Sep 23, 2026
4.3
plex · CVE-2026-96655 — Plex Media Server arbitrary-host SSRFKEVEXPLOITEDPATCHED
media server· CVSS 4.3· CWE-918
103🔥
2 art.
0
Sep 23, 2026
9.8
cis · CVE-2026-76461 — Cisco Secure Email Gateway SQL Injection VulnerabilityKEVEXPLOITED
asyncos· CVSS 9.8· CWE-89
97
17 art.
0
Sep 14, 2026
9.8
cis · CVE-2026-76519 — Cisco Secure Email Gateway Arbitrary File Write VulnerabilityKEVEXPLOITED
asyncos· CVSS 9.8· CWE-23
94
9 art.
0
Oct 14, 2026
9.3
linux · CVE-2026-99999 — ipv4: validate checksum_start before completing checksumKEVEXPLOITEDPATCHED
linux kernel· CVSS 9.3
91
11 art.
0
Oct 15, 2026
→ View full list

Pre-CVE Events

View all
ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories
cisco1 sourcesverified
ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover
axiosMEDIUM1 sourcesverified
ZERO-DAYADV990001 Latest Servicing Stack Updates
1 sourcesverified
Multiple Vulnerabilities in MapServer
mapserver team (osgeo foundation implied by download links and mailing list context, but not explicitly stated as vendor in text for the vulnerabilities themselves.)1 sources
Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS
serendipity projectCRITICAL1 sources

Latest news

View all
[B]microsoftCVE-2026-96951
Security Alert: Microsoft Releases October 2026 Security Updates
[B]microsoftCVE-2026-20805
Security Alert: Microsoft Releases January 2026 Security Updates
[B]microsoftCVE-2026-85880
Security Alert: Microsoft Releases September 2026 Security Updates
[B]microsoft
Security Alert: Microsoft Releases May 2026 Security Updates
[B]microsoftCVE-2025-62221
Security Alert: Microsoft Releases December 2025 Security Updates
[B]microsoftCVE-2026-21510
Security Alert: Microsoft Releases February 2026 Security Updates
[B]adobeCVE-2026-27220
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)
[B]adobe
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44)