Zero Day Monitor

Zero Day MonitorZDM

21

+3 today

Exploited (7d)

202

+21 today

Critical (7d)

1892

CISA KEV

403

Pre-CVE

3924

+505 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

citrix · CVE-2026-88779 — Memory overflow vulnerability leading to Denial of ServiceKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller

papercut · CVE-2026-81578 — PaperCut MF/NG: Authentication BypassKEVEXPLOITEDPATCHED

papercut_mf· CWE-305

citrix · CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller· CWE-20

microsoft · CVE-2026-85880 — Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED

windows_10_1607· CVSS 7.8· CWE-122

microsoft · CVE-2026-81963 — Windows Update Stack Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED

windows_11_23h2· CVSS 7.8· CWE-59

papercut · CVE-2026-82078 — PaperCut MF/NG: Unsafe Dynamic Class Loading in Database ConnectorKEVEXPLOITEDPATCHED

papercut_mf· CWE-470

citrix · CVE-2026-88772 — Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller

sonicwall · CVE-2026-15409 — CVE-2026-15409: A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A KEVEXPLOITEDPATCHED

sma6210_firmware· CVSS 10.0· CWE-918

sonicwall · CVE-2026-83548 — CVE-2026-83548: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternKEVEXPLOITEDPATCHED

sma8200v· CVSS 10.0· CWE-918

wordpress · CVE-2026-63030 — WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code ExecutionKEVEXPLOITEDPATCHED

wordpress· CVSS 9.8

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Multiple Vulnerabilities in MapServer

mapserver team (osgeo foundation implied by download links and mailing list context, but not explicitly stated as vendor in text for the vulnerabilities themselves.)1 sources

Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS

serendipity projectCRITICAL1 sources

Latest news

[B]microsoftCVE-2026-56164

Security Alert: Microsoft Releases July 2026 Security Updates

[B]microsoftCVE-2026-20805

Security Alert: Microsoft Releases January 2026 Security Updates

[B]microsoftCVE-2026-68820

Security Alert: Microsoft Releases August 2026 Security Updates

[B]microsoft

Security Alert: Microsoft Releases March 2026 Security Updates