Zero Day Monitor

Zero Day MonitorZDM

21

+1 today

Exploited (7d)

448

+90 today

Critical (7d)

1943

CISA KEV

474

Pre-CVE

3905

+646 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

citrix · CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller· CWE-20

cis · CVE-2026-76504 — Cisco Catalyst SD-WAN Manager System Account Authorization Bypass VulnerabilityKEVEXPLOITED

catalyst_sd-wan_manager· CVSS 9.8· CWE-177

linux · CVE-2026-99999 — ipv4: validate checksum_start before completing checksumKEVEXPLOITEDPATCHED

linux kernel· CVSS 9.3

citrix · CVE-2026-88772 — Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller

microsoft · CVE-2026-63520 — Microsoft SharePoint Server Remote Code Execution VulnerabilityKEVEXPLOITEDPATCHED

sharepoint_server· CVSS 8.1· CWE-20

openssh · CVE-2026-123158 — CVE-2026-123158: sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authenticaEXPLOITEDPATCHED

openssh· CVSS 8.1· CWE-394

google · CVE-2026-111497 — Out-of-Bounds Write in Google Brotli DecoderEXPLOITEDPATCHED

brotli· CVSS 9.8· CWE-787

barracuda · CVE-2026-116606 — Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security GatewayEXPLOITEDPATCHED

email security· CVSS 9.3· CWE-288

gitlab · CVE-2026-97229 — Integer Overflow or Wraparound in GitLabKEVEXPLOITEDPATCHED

gitlab· CVSS 10.0· CWE-190

gitlab · CVE-2026-85706 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabKEVEXPLOITEDPATCHED

gitlab· CVSS 10.0· CWE-22

→ View full list

Pre-CVE Events

ZERO-DAYeMudhra Certificate Authority Private Key Compromise

emudhraCRITICAL1 sourcesverified

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

CPython Sandbox Escape via Generic Types Handling

python1 sources

Latest news

[B]microsoftCVE-2026-42897

Security Alert: Microsoft Releases June 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)

[B]microsoftCVE-2026-32201

Security Alert: Microsoft Releases April 2026 Security Updates

[B]trend microCVE-2026-34926

Security Alert: Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI Apex One

[B]microsoftCVE-2026-20805

Security Alert: Microsoft Releases January 2026 Security Updates

[B]microsoft

Security Alert: Microsoft Releases May 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44)

[B]microsoft

Security Alert: Microsoft Releases March 2026 Security Updates