Zero Day Monitor

Zero Day MonitorZDM

27

+6 today

Exploited (7d)

305

+36 today

Critical (7d)

1853

CISA KEV

405

Pre-CVE

6302

+588 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

sonicwall · CVE-2026-15409 — CVE-2026-15409: A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A KEVEXPLOITEDPATCHED

sma6210_firmware· CVSS 10.0· CWE-918

gitea · CVE-2026-60004 — CVE-2026-60004: Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.KEVEXPLOITEDPATCHED

gitea· CVSS 9.8· CWE-94

microsoft · CVE-2026-85880 — Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED

windows_10_1607· CVSS 7.8· CWE-122

jfrog · CVE-2026-82329 — Potential authentication bypass leading to administrative access in ArtifactoryKEVEXPLOITEDPATCHED

artifactory· CVSS 9.8· CWE-287

google · CVE-2026-85046 — CVE-2026-85046: Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside KEVEXPLOITEDPATCHED

chrome· CVSS 8.8· CWE-843

GitLab · CVE-2026-85706 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabKEVEXPLOITEDPATCHED

GitLab· CVSS 10.0· CWE-22

adobe · CVE-2026-75650 — Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)KEVEXPLOITEDPATCHED

commerce· CVSS 10.0· CWE-1336

papercut · CVE-2026-81578 — PaperCut MF/NG: Authentication BypassKEVEXPLOITEDPATCHED

papercut_mf· CWE-305

cis · CVE-2026-76461 — Cisco Secure Email Gateway SQL Injection VulnerabilityKEVEXPLOITED

cisco secure email· CVSS 9.8· CWE-89

google · CVE-2026-87491 — CVE-2026-87491: Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inKEVEXPLOITEDPATCHED

chrome· CVSS 8.8· CWE-787

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Multiple Vulnerabilities in MapServer

mapserver team (osgeo foundation implied by download links and mailing list context, but not explicitly stated as vendor in text for the vulnerabilities themselves.)1 sources

Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS

serendipity projectCRITICAL1 sources

Latest news

[B]microsoftCVE-2026-42897

Security Alert: Microsoft Releases June 2026 Security Updates

[B]microsoftCVE-2026-32201

Security Alert: Microsoft Releases April 2026 Security Updates

[B]microsoftCVE-2026-85880

Security Alert: Microsoft Releases September 2026 Security Updates

[B]trend microCVE-2026-34926

Security Alert: Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI Apex One

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)

[B]microsoft

Security Alert: Microsoft Releases March 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)

[B]microsoftCVE-2026-68820

Security Alert: Microsoft Releases August 2026 Security Updates