Zero Day Monitor

Zero Day MonitorZDM

27

+3 today

Exploited (7d)

146

+15 today

Critical (7d)

1882

CISA KEV

403

Pre-CVE

4545

+283 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

citrix netscaler · CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsKEVEXPLOITEDPATCHED

mikrotik · CVE-2026-86060 — SSH session privilege manipulation via a crafted username in Mikrotik RouterOSKEVEXPLOITEDPATCHED

routeros· CWE-88

citrix netscaler · CVE-2026-88772 — Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceKEVEXPLOITEDPATCHED

checkpoint · CVE-2026-85102 — Improper Certificate Validation in Quantum Security GatewayKEVEXPLOITED

gaia_embedded· CVSS 9.8· CWE-295

checkpoint · CVE-2026-93616 — Directory Traversal and File upload allows execution of arbitrary script on the Management ServerKEVEXPLOITED

multi-domain_security_management· CVSS 9.8· CWE-22

mikrotik · CVE-2026-67279 — SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOSKEVEXPLOITEDPATCHED

routeros· CWE-841

WordPress · CVE-2026-87902 — CVE-2026-87902: An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.phKEVEXPLOITEDPATCHED

WordPress· CVSS 8.1· CWE-98

f5 · CVE-2026-94127 — BIG-IP APM OAuth vulnerabilityKEVEXPLOITEDPATCHED

big-ip_access_policy_manager· CVSS 9.8· CWE-122

gitlab · CVE-2026-85706 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabKEVEXPLOITEDPATCHED

gitlab· CVSS 10.0· CWE-22

adobe · CVE-2026-71362 — Adobe Commerce | Incorrect Authorization (CWE-863)KEVEXPLOITEDPATCHED

commerce· CVSS 9.1· CWE-863

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Multiple Vulnerabilities in MapServer

mapserver team (osgeo foundation implied by download links and mailing list context, but not explicitly stated as vendor in text for the vulnerabilities themselves.)1 sources

Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS

serendipity projectCRITICAL1 sources

Latest news

[B]microsoft

Security Alert: Microsoft Releases May 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44)

[B]microsoftCVE-2026-85880

Security Alert: Microsoft Releases September 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)