Zero Day Monitor

Zero Day Monitor

105735

New CVEs

253

Critical

0

Pre-CVE

1386

CISA KEV

1777

Articles

36/41

Feeds

Vulnerabilities

aquasec · CVE-2026-33634 — Trivy ecosystem supply chain briefly compromisedKEVEXPLOITED

setup-trivy· CVSS 8.8· CWE-506

langflow · CVE-2026-33017 — Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows withouKEVEXPLOITED

langflow· CVSS 9.3· CWE-94

Cloud Software Group · CVE-2026-3055 — Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overreadKEVEXPLOITED

NetScaler ADC and NetScaler Gateway· CVSS 9.3· CWE-125

linux · CVE-2026-23400 — rust_binder: call set_notification_done() without proc lockEXPLOITED

linux kernel· CVSS 0.0

gnu · CVE-2026-24061 — telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.KEVEXPLOITED

inetutils· CVSS 9.8· CWE-88

microsoft · CVE-2026-21510 — Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.KEVEXPLOITED

windows_10_1607· CVSS 8.8· CWE-693

micromatch · CVE-2026-33671 — Picomatch has a ReDoS vulnerability via extglob quantifiersEXPLOITED

picomatch· CVSS 7.5· CWE-1333

apple · CVE-2026-28871 — CVE-2026-28871: A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS EXPLOITED

safari· CVSS 4.3

microsoft · CVE-2026-20805 — Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.KEVEXPLOITED

windows_10_1607· CVSS 5.5· CWE-200

cisco · CVE-2026-20131 — A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root&nKEVEXPLOITED

secure_firewall_management_center· CVSS 10.0· CWE-502

→ View full list

Urgent

aquasec setup-trivy

linux linux kernel

Cloud Software Group NetScaler ADC and NetScaler Gateway

linux linux kernel

langflow langflow