Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3467 articles · 105975 vulns · 38/41 feeds (7d)
657
+180 today
Exploited (7d)
333
+120 today
Critical (7d)
1533
CISA KEV
15
Pre-CVE
3467
+655 today
Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending
Ranked by source count
Zero-Days
Pre-CVE detection
Verification
Community-driven
Open Source
AGPL-3.0 licensed
Learn more about the projectSign in for personalized features

Vulnerabilities

9.1
fortinet · CVE-2026-35616 — CVE-2026-35616: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attaKEVEXPLOITEDPATCHED
forticlientems· CVSS 9.1· CWE-284
150🔥
17 art.
0
Apr 4, 2026
8.8
google · CVE-2026-5281 — CVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderKEV
EXPLOITED
PATCHED
chrome· CVSS 8.8· CWE-416
133🔥
14 art.
0
Apr 1, 2026
9.8
wp ninjas · CVE-2026-0740 — Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File UploadKEVEXPLOITED
ninja forms - file uploads· CVSS 9.8· CWE-434
126🔥
3 art.
0
Apr 7, 2026
9.8
fortinet · CVE-2026-21643 — An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized codKEVEXPLOITEDPATCHED
forticlientems· CVSS 9.8· CWE-89
116🔥
10 art.
0
Feb 6, 2026
7.8
trueconf · CVE-2026-3502 — TrueConf Client Update Integrity Verification BypassKEVEXPLOITED
trueconf· CVSS 7.8· CWE-494
103🔥
7 art.
1
Mar 30, 2026
9.8
weaver (fanwei) · CVE-2026-22679 — Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug EndpointKEVEXPLOITEDPATCHED
e-cology· CVSS 9.8· CWE-306
96
1 art.
0
Apr 7, 2026
7.8
microsoft · CVE-2026-21509 — Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.KEVEXPLOITED
365_apps· CVSS 7.8· CWE-807
95
1 art.
0
Jan 26, 2026
8.8
microsoft · CVE-2026-21513 — Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.KEVEXPLOITEDPATCHED
windows_10_1607· CVSS 8.8· CWE-693
95
1 art.
0
Feb 10, 2026
5.4
djangoproject · CVE-2026-1207 — An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on ``RasterField`` (only implemented on PostGIS) allows remote attackers to inject SQL via the banKEVEXPLOITEDPATCHED
django· CVSS 5.4· CWE-89
92
2 art.
0
Feb 3, 2026
9.8
smartertools · CVE-2026-23760 — SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails tKEVEXPLOITEDPATCHED
smartermail· CVSS 9.8· CWE-288
91
2 art.
0
Jan 22, 2026
→ View full list

Pre-CVE Events

View all
Multiple vulnerabilities in Mitel MiCollab
mitel networks1 sources
Re: [EXTERN] Re: [oss-security] Multiple CVEs disclosed in CUPS
1 sources
Multiple vulnerabilities in GitLab CE and EE prior to 18.10.3, 18.9.5, and 18.8.9
gitlab1 sources
Open Redirect Vulnerability in HPE Aruba Networking Private 5G Core
hewlett packard enterpri1 sources
Microsoft Windows Local Privilege Escalation Vulnerability
microsoftHIGH1 sources

Latest news

View all
[B]microsoftCVE-2026-20805
Security Alert: Microsoft Releases January 2026 Security Updates
[B]microsoftCVE-2026-21510
Security Alert: Microsoft Releases February 2026 Security Updates
[B]adobe
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)
[B]microsoft
Security Alert: Microsoft Releases March 2026 Security Updates
[B]microsoftCVE-2025-62221
Security Alert: Microsoft Releases December 2025 Security Updates
[B]adobeCVE-2026-27220
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)
[B]mitel networks
Mitel security advisory (AV26-328)
13m ago
[C]invisible-islandCVE-2022-45063
Re: systemd-journald in systemd 259 does not escape characters in emerg messages that are wall'd to other user's terminals
1h ago