Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
7022 articles · 234414 vulns · 35/41 feeds (7d)
22
+5 today
Exploited (7d)
336
+123 today
Critical (7d)
1903
CISA KEV
403
Pre-CVE
7022
+3616 today
Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending
Ranked by source count
Zero-Days
Pre-CVE detection
Verification
Community-driven
Open Source
AGPL-3.0 licensed
Learn more about the projectSign in for personalized features

Vulnerabilities

8.8
microsoft · CVE-2026-96951 — Windows Shell Security Feature Bypass VulnerabilityKEVEXPLOITEDPATCHED
windows· CVSS 8.8· CWE-77
157🔥
12 art.
0
Oct 13, 2026
10.0
gitlab · CVE-2026-85706 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabKEVEXPLOITED
PATCHED
gitlab· CVSS 10.0· CWE-22
147🔥
14 art.
0
Sep 12, 2026
10.0
sap · CVE-2026-58231 — Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)KEVEXPLOITED
sap commerce cloud (data hub adapter)· CVSS 10.0· CWE-94
136🔥
15 art.
0
Aug 11, 2026
9.8
bricksforge · CVE-2026-85097 — Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' ParameterKEVEXPLOITED
bricksforge· CVSS 9.8· CWE-434
101🔥
3 art.
0
Oct 8, 2026
—
citrix · CVE-2026-88779 — Memory overflow vulnerability leading to Denial of ServiceKEVEXPLOITEDPATCHED
netscaler_application_delivery_controller
99
18 art.
0
Oct 4, 2026
8.6
ivanti · CVE-2026-104935 — CVE-2026-104935: Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbPATCHED
connect_secure· CVSS 8.6· CWE-290
90
8 art.
0
Oct 13, 2026
—
papercut · CVE-2026-81578 — PaperCut MF/NG: Authentication BypassKEVEXPLOITEDPATCHED
papercut_mf· CWE-305
80
16 art.
0
Aug 28, 2026
—
citrix · CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsKEVEXPLOITEDPATCHED
netscaler_application_delivery_controller· CWE-20
78
30 art.
0
Sep 27, 2026
—
papercut · CVE-2026-82078 — PaperCut MF/NG: Unsafe Dynamic Class Loading in Database ConnectorKEVEXPLOITEDPATCHED
papercut_mf· CWE-470
77
17 art.
0
Aug 28, 2026
7.8
microsoft · CVE-2026-85880 — Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED
windows_10_1607· CVSS 7.8· CWE-122
76
21 art.
0
Sep 8, 2026
→ View full list

Pre-CVE Events

View all
ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories
cisco1 sourcesverified
ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover
axiosMEDIUM1 sourcesverified
ZERO-DAYADV990001 Latest Servicing Stack Updates
1 sourcesverified
Multiple Vulnerabilities in MapServer
mapserver team (osgeo foundation implied by download links and mailing list context, but not explicitly stated as vendor in text for the vulnerabilities themselves.)1 sources
Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS
serendipity projectCRITICAL1 sources

Latest news

View all
[B]microsoftCVE-2026-68820
Security Alert: Microsoft Releases August 2026 Security Updates
[B]microsoft
Security Alert: Microsoft Releases March 2026 Security Updates
[B]adobe
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)
[B]microsoftCVE-2026-20805
Security Alert: Microsoft Releases January 2026 Security Updates
[B]microsoftCVE-2026-85880
Security Alert: Microsoft Releases September 2026 Security Updates
[B]microsoftCVE-2026-42897
Security Alert: Microsoft Releases June 2026 Security Updates
[B]adobe
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)
[B]trend microCVE-2026-34926
Security Alert: Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI Apex One