Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3356 articles · 105663 vulns · 38/41 feeds (7d)
637
+221 today
Exploited (7d)
369
+176 today
Critical (7d)
1533
CISA KEV
11
Pre-CVE
3356
+707 today
Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending
Ranked by source count
Zero-Days
Pre-CVE detection
Verification
Community-driven
Open Source
AGPL-3.0 licensed
Learn more about the projectSign in for personalized features

Vulnerabilities

9.1
fortinet · CVE-2026-35616 — CVE-2026-35616: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attaKEVEXPLOITEDPATCHED
forticlientems· CVSS 9.1· CWE-284
155🔥
17 art.
0
Apr 4, 2026
8.8
google · CVE-2026-5281 — CVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderKEV
EXPLOITED
PATCHED
chrome· CVSS 8.8· CWE-416
138🔥
14 art.
0
Apr 1, 2026
9.8
fortinet · CVE-2026-21643 — An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized codKEVEXPLOITEDPATCHED
forticlientems· CVSS 9.8· CWE-89
120🔥
10 art.
0
Feb 6, 2026
9.8
wp ninjas · CVE-2026-0740 — Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File UploadKEVEXPLOITED
ninja forms - file uploads· CVSS 9.8· CWE-434
117🔥
2 art.
0
Apr 7, 2026
7.8
trueconf · CVE-2026-3502 — TrueConf Client Update Integrity Verification BypassKEVEXPLOITED
trueconf· CVSS 7.8· CWE-494
110🔥
7 art.
1
Mar 30, 2026
9.8
weaver (fanwei) · CVE-2026-22679 — Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug EndpointKEVEXPLOITEDPATCHED
e-cology· CVSS 9.8· CWE-306
100
1 art.
0
Apr 7, 2026
9.8
smartertools · CVE-2026-23760 — SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails tKEVEXPLOITEDPATCHED
smartermail· CVSS 9.8· CWE-288
95
2 art.
0
Jan 22, 2026
9.8
beyondtrust · CVE-2026-1731 — BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted reqKEVEXPLOITEDPATCHED
privileged_remote_access· CVSS 9.8· CWE-78
85
1 art.
0
Feb 6, 2026
7.8
openprinting · CVE-2026-34990 — OpenPrinting CUPS: Local print admin token disclosure using temporary printersEXPLOITED
cups· CVSS 7.8· CWE-287
77
5 art.
0
Apr 3, 2026
—
budiba · CVE-2026-25044 — Budibase: Command Injection in Bash Automation StepEXPLOITEDPATCHED
budibase· CWE-78
73
2 art.
0
Apr 3, 2026
→ View full list

Pre-CVE Events

View all
Multiple vulnerabilities in Snipe-IT allow bypassing security measures and potential Cross-Site Scripting
MEDIUM1 sources
Multiple Vulnerabilities in GStreamer Allow Denial-of-Service and Potential Code Execution
gstreamerMEDIUM1 sources
Multiple Vulnerabilities in Zammad Allow Code Execution, Security Bypass, Information Disclosure, and Cross-Site Scripting
zammadMEDIUM1 sources
Malicious Supply Chain Compromise in litellm
python package index1 sources
Multiple Vulnerabilities in Mozilla Firefox and Thunderbird Allow Denial of Service and Arbitrary Code Execution
mozillaHIGH1 sources

Latest news

View all
[B]adobeCVE-2026-27220
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)
[B]microsoftCVE-2026-20805
Security Alert: Microsoft Releases January 2026 Security Updates
[B]microsoftCVE-2025-62221
Security Alert: Microsoft Releases December 2025 Security Updates
[B]microsoft
Security Alert: Microsoft Releases March 2026 Security Updates
[B]microsoftCVE-2026-21510
Security Alert: Microsoft Releases February 2026 Security Updates
[B]adobe
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)
[B]gstreamer
[NEU] [mittel] GStreamer: Mehrere Schwachstellen
22m ago
[B]django software foundationCVE-2026-3902
[NEU] [mittel] Django: Mehrere Schwachstellen
26m ago