Zero Day Monitor

Zero Day Monitor

105729

New CVEs

252

Critical

0

Pre-CVE

1384

CISA KEV

1768

Articles

36/41

Feeds

Vulnerabilities

aquasec · CVE-2026-33634 — Trivy ecosystem supply chain briefly compromisedKEVEXPLOITED

setup-trivy· CVSS 8.8· CWE-506

langflow · CVE-2026-33017 — Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows withouKEVEXPLOITED

langflow· CVSS 9.3· CWE-94

linux · CVE-2026-23400 — rust_binder: call set_notification_done() without proc lockEXPLOITED

linux kernel· CVSS 0.0

gnu · CVE-2026-24061 — telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.KEVEXPLOITED

inetutils· CVSS 9.8· CWE-88

microsoft · CVE-2026-21510 — Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.KEVEXPLOITED

windows_10_1607· CVSS 8.8· CWE-693

micromatch · CVE-2026-33671 — Picomatch has a ReDoS vulnerability via extglob quantifiersEXPLOITED

picomatch· CVSS 7.5· CWE-1333

Cloud Software Group · CVE-2026-3055 — Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overreadEXPLOITED

NetScaler ADC and NetScaler Gateway· CVSS 9.3· CWE-125

microsoft · CVE-2026-20805 — Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.KEVEXPLOITED

windows_10_1607· CVSS 5.5· CWE-200

isc · CVE-2026-3591 — A use-after-return vulnerability exists in the `named` server when handling DNS queries signed with SIG(0). Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperlyEXPLOITED

BIND 9· CVSS 7.5· CWE-305

cisco · CVE-2026-20131 — A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root&nKEVEXPLOITED

secure_firewall_management_center· CVSS 10.0· CWE-502

→ View full list

Urgent

aquasec setup-trivy

linux linux kernel

linux linux kernel

langflow langflow

wazuh wazuh-manager