Zero Day Monitor

Zero Day MonitorZDM

16

+2 today

Exploited (7d)

209

+48 today

Critical (7d)

1823

CISA KEV

404

Pre-CVE

3339

+591 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

jfrog · CVE-2026-82329 — Potential authentication bypass leading to administrative access in ArtifactoryKEVEXPLOITEDPATCHED

artifactory· CVSS 9.8· CWE-287

sonicwall · CVE-2026-83548 — CVE-2026-83548: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternKEVEXPLOITEDPATCHED

sma8200v· CVSS 10.0· CWE-918

microsoft · CVE-2026-63520 — Microsoft SharePoint Server Remote Code Execution VulnerabilityKEVEXPLOITEDPATCHED

sharepoint_server· CVSS 8.1· CWE-20

sonicwall · CVE-2026-83549 — CVE-2026-83549: Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabiKEVEXPLOITEDPATCHED

sma8200v· CVSS 7.8· CWE-78

langflow · CVE-2026-9198 — Unauthenticated Remote Code Execution via Auto-Login Bypass and Code ValidationKEVEXPLOITEDPATCHED

langflow· CVSS 9.8· CWE-94

sangoma · CVE-2026-9586 — Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMBKEVEXPLOITEDPATCHED

switchvox· CVSS 9.0· CWE-89

google · CVE-2026-11645 — CVE-2026-11645: Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitraEXPLOITEDPATCHED

chrome· CVSS 8.8

rubygems · CVE-2026-66066 — Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processingKEVEXPLOITEDPATCHED

activestorage· CWE-1188

linux · CVE-2026-46331 — net/sched: fix pedit partial COW leading to page cache corruptionEXPLOITEDPATCHED

linux_kernel· CVSS 7.8

linux · CVE-2026-53359 — KVM: x86: Fix shadow paging use-after-free due to unexpected roleEXPLOITEDPATCHED

linux_kernel· CVSS 8.8

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS

serendipity projectCRITICAL1 sources

CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04

Latest news

[B]microsoftCVE-2026-68820

Security Alert: Microsoft Releases August 2026 Security Updates

[B]microsoft

Security Alert: Microsoft Releases March 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)

[B]adobeCVE-2026-27220

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)