Zero Day Monitor
Dashboard
Vulnerabilities
Trending
Zero-Days
News
Login
107303
New CVEs
303
Critical
2
Pre-CVE
1491
CISA KEV
2318
Articles
35/40
Feeds
Vulnerabilities
Trending
Newest
Urgent
9.8
langflow-ai ·
CVE-2026-33017 —
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
KEV
EXPLOITED
langflow
· CVSS 9.8
· CWE-94
146
🔥
5 articles
0
Mar 20, 2026
—
aquasecurity ·
CVE-2026-33634 —
Trivy ecosystem supply chain briefly compromised
KEV
EXPLOITED
setup-trivy
· CWE-506
119
🔥
2 articles
0
Mar 23, 2026
10.0
oracle ·
CVE-2026-21962 —
Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Prox
KEV
EXPLOITED
http_server
· CVSS 10.0
· CWE-284
98
1 articles
0
Jan 20, 2026
10.0
cis ·
CVE-2026-20131 —
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
KEV
EXPLOITED
secure_firewall_management_center
· CVSS 10.0
· CWE-502
97
8 articles
0
Mar 4, 2026
10.0
cis ·
CVE-2026-20127 —
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, r
KEV
EXPLOITED
catalyst_sd-wan_manager
· CVSS 10.0
· CWE-287
87
1 articles
0
Feb 25, 2026
7.1
8theme ·
CVE-2026-25306 —
WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability
KEV
EXPLOITED
XStore Core
· CVSS 7.1
· CWE-79
84
1 articles
0
Mar 25, 2026
7.8
microsoft ·
CVE-2026-21514 —
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
KEV
EXPLOITED
365_apps
· CVSS 7.8
· CWE-807
80
1 articles
0
Feb 10, 2026
7.8
microsoft ·
CVE-2026-21533 —
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
KEV
EXPLOITED
windows_10_1607
· CVSS 7.8
· CWE-269
80
1 articles
0
Feb 10, 2026
8.8
microsoft ·
CVE-2026-21513 —
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.
KEV
EXPLOITED
windows_10_1607
· CVSS 8.8
· CWE-693
80
1 articles
0
Feb 10, 2026
8.8
microsoft ·
CVE-2026-21510 —
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
KEV
EXPLOITED
windows_10_1607
· CVSS 8.8
· CWE-693
80
1 articles
0
Feb 10, 2026
→ View full list
Urgent
33.0
langflow-ai langflow
CVE-2026-33017
KEV
6d ago
29.5
cis secure_firewall_management_center
CVE-2026-20131
KEV
22d ago
23.9
8theme XStore Core
CVE-2026-25306
KEV
1d ago
23.8
ISC BIND 9
CVE-2026-1519
EXP
1d ago
23.7
ISC Kea
CVE-2026-3608
EXP
1d ago
23.0
GNU Inetutils
CVE-2026-24061
KEV
64d ago
23.0
harttle liquidjs
CVE-2026-33287
EXP
1d ago
22.5
PublishPress PublishPress Revisions
CVE-2026-32539
EXP
1d ago
22.5
andrew munro / affiliatewp rewardswp
CVE-2026-32520
EXP
1d ago
22.5
edge-themes pelicula
CVE-2026-32512
EXP
1d ago
View full list
Pre-CVE Events
View all
Vulnerability in HPE Telco Service Orchestrator
hewlett packard enterpri
1 sources
reported
Vulnerabilities in ABB Ability Camera Connect
abb
1 sources
reported
Latest news
[JPCERT/CC]
Security Alert: Alert Regarding Vulnerabilities in Adobe Acr...
[JPCERT/CC]
Security Alert: Microsoft Releases February 2026 Security Up...
[JPCERT/CC]
Security Alert: Microsoft Releases January 2026 Security Upd...
[JPCERT/CC]
Security Alert: Alert Regarding Vulnerabilities in Adobe Acr...
[JPCERT/CC]
Security Alert: Microsoft Releases December 2025 Security Up...
[JPCERT/CC]
Security Alert: Microsoft Releases March 2026 Security Updat...
[CCCS Canada]
Spring security advisory (AV26-288)
48m ago
[CCCS Canada]
HPE security advisory (AV26-287)
54m ago
Pipeline
0
Queued
0
Analyzing
479
Today