Zero Day Monitor

Zero Day MonitorZDM

780

+227 today

Exploited (7d)

369

+105 today

Critical (7d)

1679

CISA KEV

300

Pre-CVE

3722

+921 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

adobe · CVE-2026-34621 — Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)KEVEXPLOITEDPATCHED

acrobat_dc· CVSS 8.6· CWE-1321

oracle · CVE-2026-35273 — CVE-2026-35273: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment ManaKEVEXPLOITEDPATCHED

peoplesoft_enterprise_peopletools· CVSS 9.8· CWE-200

simple-help · CVE-2026-48558 — SimpleHelp Authentication Bypass via Missing OIDC JWT Signature VerificationKEVEXPLOITEDPATCHED

simplehelp· CVSS 10.0· CWE-347

microsoft · CVE-2026-33825 — Microsoft Defender Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED

defender_antimalware_platform· CVSS 7.8· CWE-1220

oracle · CVE-2026-46817 — CVE-2026-46817: Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versiKEVEXPLOITEDPATCHED

e-business_suite· CVSS 9.8

linux · CVE-2026-43284 — xfrm: esp: avoid in-place decrypt on shared skb fragsKEVEXPLOITEDPATCHED

linux_kernel· CVSS 8.8

linux · CVE-2026-43500 — rxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentKEVEXPLOITEDPATCHED

linux_kernel· CVSS 7.8

citrix · CVE-2026-8451 — Insufficient input validation leading to memory overreadEXPLOITEDPATCHED

netscaler adc· CVSS 8.8· CWE-125

ptc · CVE-2026-12569 — Remote Code Execution (RCE) vulnerability in Windchill PDMlinkEXPLOITEDPATCHED

flexplm· CWE-20

adobe · CVE-2026-48282 — ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EXPLOITEDPATCHED

coldfusion· CVSS 10.0· CWE-22

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Heap Buffer Overflow in check_icmp due to Host Count Overflow

monitoring pluginsHIGH1 sources

Multiple Vulnerabilities in Gitea Allow Privilege Escalation, Security Bypass, Data Manipulation, Information Disclosure, and Denial of Service

giteaHIGH1 sources

Latest news

[B]trend microCVE-2026-34926

Security Alert: Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI Apex One

[B]microsoftCVE-2026-42897

Security Alert: Microsoft Releases June 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44)

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)

[B]microsoftCVE-2026-21510

Security Alert: Microsoft Releases February 2026 Security Updates

[B]microsoftCVE-2026-32201

Security Alert: Microsoft Releases April 2026 Security Updates

[B]microsoft

Security Alert: Microsoft Releases May 2026 Security Updates