Zero Day Monitor

Zero Day MonitorZDM

17

+3 today

Exploited (7d)

167

+44 today

Critical (7d)

1724

CISA KEV

410

Pre-CVE

2832

+609 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

jetbrains · CVE-2026-63077 — CVE-2026-63077: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollinKEVEXPLOITEDPATCHED

teamcity· CVSS 9.8· CWE-502

langflow · CVE-2026-9198 — Unauthenticated Remote Code Execution via Auto-Login Bypass and Code ValidationKEVEXPLOITEDPATCHED

langflow· CVSS 9.8· CWE-94

checkpoint · CVE-2026-50751 — User Authentication Bypass in VPN Remote Access and Mobile AccessKEVEXPLOITEDPATCHED

gaia_os· CVSS 9.3· CWE-287

microsoft · CVE-2026-42897 — Microsoft Exchange Server Spoofing VulnerabilityKEVEXPLOITEDPATCHED

exchange_server· CVSS 8.1· CWE-79

f5 · CVE-2026-42945 — NGINX ngx_http_rewrite_module vulnerabilityKEVEXPLOITEDPATCHED

dos· CVSS 8.1· CWE-122

archive\ · CVE-2026-42496 — Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directoryEXPLOITEDPATCHED

\· CVSS 9.1· EPSS 0.00· CWE-59

sonicwall · CVE-2026-15409 — CVE-2026-15409: A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A EXPLOITEDPATCHED

sma6210_firmware· CVSS 10.0· CWE-918

rubygems · CVE-2026-66066 — Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processingPATCHED

activestorage· CWE-1188

archive\ · CVE-2026-42497 — Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directoryEXPLOITEDPATCHED

\· CVSS 7.5· CWE-59

palo alto networks · CVE-2026-0257 — PAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesEXPLOITEDPATCHED

pan-os· CVSS 7.8· CWE-565

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS

serendipity projectCRITICAL1 sources

CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04

Latest news

[B]microsoftCVE-2026-56164

Security Alert: Microsoft Releases July 2026 Security Updates

[B]trend microCVE-2026-34926

Security Alert: Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI Apex One

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)

[B]adobeCVE-2026-27220

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44)

[B]microsoftCVE-2026-32201

Security Alert: Microsoft Releases April 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)

[B]microsoftCVE-2025-62221

Security Alert: Microsoft Releases December 2025 Security Updates