Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3423 articles · 105702 vulns · 38/41 feeds (7d)
651
+218 today
Exploited (7d)
372
+168 today
Critical (7d)
1533
CISA KEV
11
Pre-CVE
3423
+714 today
Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending
Ranked by source count
Zero-Days
Pre-CVE detection
Verification
Community-driven
Open Source
AGPL-3.0 licensed
Learn more about the projectSign in for personalized features

Vulnerabilities

9.1
fortinet · CVE-2026-35616 — CVE-2026-35616: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attaKEVEXPLOITEDPATCHED
forticlientems· CVSS 9.1· CWE-284
153🔥
17 art.
0
Apr 4, 2026
8.8
google · CVE-2026-5281 — CVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderKEV
EXPLOITED
PATCHED
chrome· CVSS 8.8· CWE-416
136🔥
14 art.
0
Apr 1, 2026
9.8
wp ninjas · CVE-2026-0740 — Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File UploadKEVEXPLOITED
ninja forms - file uploads· CVSS 9.8· CWE-434
128🔥
3 art.
0
Apr 7, 2026
9.8
fortinet · CVE-2026-21643 — An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized codKEVEXPLOITEDPATCHED
forticlientems· CVSS 9.8· CWE-89
118🔥
10 art.
0
Feb 6, 2026
7.8
trueconf · CVE-2026-3502 — TrueConf Client Update Integrity Verification BypassKEVEXPLOITED
trueconf· CVSS 7.8· CWE-494
105🔥
7 art.
1
Mar 30, 2026
9.8
weaver (fanwei) · CVE-2026-22679 — Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug EndpointKEVEXPLOITEDPATCHED
e-cology· CVSS 9.8· CWE-306
98
1 art.
0
Apr 7, 2026
9.8
smartertools · CVE-2026-23760 — SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails tKEVEXPLOITEDPATCHED
smartermail· CVSS 9.8· CWE-288
93
2 art.
0
Jan 22, 2026
5.4
djangoproject · CVE-2026-1207 — An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on ``RasterField`` (only implemented on PostGIS) allows remote attackers to inject SQL via the banKEVEXPLOITEDPATCHED
django· CVSS 5.4· CWE-89
93
2 art.
0
Feb 3, 2026
9.8
beyondtrust · CVE-2026-1731 — BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted reqKEVEXPLOITEDPATCHED
privileged_remote_access· CVSS 9.8· CWE-78
84
1 art.
0
Feb 6, 2026
7.8
openprinting · CVE-2026-34990 — OpenPrinting CUPS: Local print admin token disclosure using temporary printersEXPLOITED
cups· CVSS 7.8· CWE-287
76
5 art.
0
Apr 3, 2026
→ View full list

Pre-CVE Events

View all
Microsoft Windows Local Privilege Escalation Vulnerability
microsoftHIGH1 sources
Multiple vulnerabilities in Snipe-IT allow bypassing security measures and potential Cross-Site Scripting
MEDIUM1 sources
Multiple Vulnerabilities in Zammad Allow Code Execution, Security Bypass, Information Disclosure, and Cross-Site Scripting
zammadMEDIUM1 sources
Malicious Supply Chain Compromise in litellm
python package index1 sources
Multiple Vulnerabilities in Mozilla Firefox and Thunderbird Allow Denial of Service and Arbitrary Code Execution
mozillaHIGH1 sources

Latest news

View all
[B]microsoftCVE-2025-62221
Security Alert: Microsoft Releases December 2025 Security Updates
[B]microsoftCVE-2026-20805
Security Alert: Microsoft Releases January 2026 Security Updates
[B]adobeCVE-2026-27220
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)
[B]adobe
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)
[B]microsoft
Security Alert: Microsoft Releases March 2026 Security Updates
[B]microsoftCVE-2026-21510
Security Alert: Microsoft Releases February 2026 Security Updates
[C]red hatCVE-2025-57854
CVE-2025-57854 | Red Hat OpenShift Update Service default permission
29m ago
[C]red hatCVE-2025-57853
CVE-2025-57853 | Red Hat Web Terminal default permission
29m ago