Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
6297 articles · 219826 vulns · 36/41 feeds (7d)
33
Exploited (7d)
355
+5 today
Critical (7d)
1863
CISA KEV
404
Pre-CVE
6297
+130 today
Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending
Ranked by source count
Zero-Days
Pre-CVE detection
Verification
Community-driven
Open Source
AGPL-3.0 licensed
Learn more about the projectSign in for personalized features

Vulnerabilities

9.8
cis · CVE-2026-76461 — Cisco Secure Email Gateway SQL Injection VulnerabilityKEVEXPLOITED
asyncos· CVSS 9.8· CWE-89
158🔥
12 art.
0
Sep 14, 2026
10.0
cis · CVE-2026-76460 — Cisco Identity Services Engine Authentication Bypass VulnerabilityKEVEXPLOITED
identity_services_engine
· CVSS 10.0
· CWE-648
158🔥
14 art.
0
Sep 16, 2026
7.8
acronis · CVE-2026-87886 — CVE-2026-87886: Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin KEVEXPLOITEDPATCHED
acronis_backup· CVSS 7.8· CWE-276
119🔥
2 art.
0
Sep 17, 2026
9.8
vmware · CVE-2026-59310 — vCenter directory-traversal vulnerabilityKEVEXPLOITEDPATCHED
vcenter_server· CVSS 9.8· CWE-22
108🔥
18 art.
0
Jul 30, 2026
9.8
conductor-oss · CVE-2026-58138 — Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script EvaluatorsKEVEXPLOITEDPATCHED
conductor· CVSS 9.8· CWE-94
100
4 art.
0
Jun 30, 2026
8.8
google · CVE-2026-85046 — CVE-2026-85046: Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside KEVEXPLOITEDPATCHED
chrome· CVSS 8.8· CWE-843
98
23 art.
0
Sep 3, 2026
8.8
google · CVE-2026-87491 — CVE-2026-87491: Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inKEVEXPLOITEDPATCHED
chrome· CVSS 8.8· CWE-787
98
15 art.
0
Sep 9, 2026
7.8
linux · CVE-2026-53362 — ipv6: account for fraggap on the paged allocation pathKEVEXPLOITEDPATCHED
linux_kernel· CVSS 7.8
97
14 art.
0
Jul 4, 2026
9.8
rocketgenius · CVE-2026-84434 — Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload FieldKEVEXPLOITED
gravity forms· CVSS 9.8· CWE-434
90
1 art.
0
Sep 19, 2026
9.3
lfprojects · CVE-2026-64849 — MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)KEVEXPLOITEDPATCHED
mlflow· CVSS 9.3· CWE-918
80
7 art.
0
Aug 17, 2026
→ View full list

Pre-CVE Events

View all
ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories
cisco1 sourcesverified
ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover
axiosMEDIUM1 sourcesverified
ZERO-DAYADV990001 Latest Servicing Stack Updates
1 sourcesverified
Multiple Vulnerabilities in MapServer
mapserver team (osgeo foundation implied by download links and mailing list context, but not explicitly stated as vendor in text for the vulnerabilities themselves.)1 sources
Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS
serendipity projectCRITICAL1 sources

Latest news

View all
[B]microsoftCVE-2026-32201
Security Alert: Microsoft Releases April 2026 Security Updates
[B]microsoftCVE-2026-56164
Security Alert: Microsoft Releases July 2026 Security Updates
[B]trend microCVE-2026-34926
Security Alert: Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI Apex One
[B]microsoftCVE-2026-68820
Security Alert: Microsoft Releases August 2026 Security Updates
[B]microsoftCVE-2026-21510
Security Alert: Microsoft Releases February 2026 Security Updates
[B]microsoftCVE-2025-62221
Security Alert: Microsoft Releases December 2025 Security Updates
[B]microsoftCVE-2026-20805
Security Alert: Microsoft Releases January 2026 Security Updates
[B]adobeCVE-2026-27220
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)