Zero Day Monitor

Zero Day Monitor

105755

New CVEs

257

Critical

1

Pre-CVE

1386

CISA KEV

1859

Articles

38/41

Feeds

Vulnerabilities

Cloud Software Group · CVE-2026-3055 — Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overreadKEVEXPLOITED

NetScaler ADC and NetScaler Gateway· CVSS 9.3· CWE-125

aquasec · CVE-2026-33634 — Trivy ecosystem supply chain briefly compromisedKEVEXPLOITED

setup-trivy· CVSS 8.8· CWE-506

langflow · CVE-2026-33017 — Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows withouKEVEXPLOITED

langflow· CVSS 9.3· CWE-94

fortinet · CVE-2026-24858 — An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 KEVEXPLOITED

fortianalyzer· CVSS 9.8· CWE-288

fortinet · CVE-2026-21643 — An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized codKEVEXPLOITED

forticlientems· CVSS 9.8· CWE-89

Citrix · CVE-2026-4368 — Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session MixupEXPLOITED

NetScaler ADC and NetScaler Gateway· CWE-362

gnu · CVE-2026-24061 — telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.KEVEXPLOITED

inetutils· CVSS 9.8· CWE-88

linux · CVE-2026-23399 — nf_tables: nft_dynset: fix possible stateful expression memleak in error pathEXPLOITED

linux · CVE-2026-23400 — rust_binder: call set_notification_done() without proc lockEXPLOITED

linux kernel· CVSS 0.0

microsoft · CVE-2026-21510 — Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.KEVEXPLOITED

windows_10_1607· CVSS 8.8· CWE-693

→ View full list

Urgent

aquasec setup-trivy

Cloud Software Group NetScaler ADC and NetScaler Gateway

linux linux kernel

gitlab GitLab Community Edition/Enterprise Edition