Zero Day Monitor

Zero Day MonitorZDM

17

+2 today

Exploited (7d)

206

+24 today

Critical (7d)

1820

CISA KEV

404

Pre-CVE

3793

+721 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

jfrog · CVE-2026-82329 — Potential authentication bypass leading to administrative access in ArtifactoryKEVEXPLOITEDPATCHED

artifactory· CVSS 9.8· CWE-287

sonicwall · CVE-2026-83548 — CVE-2026-83548: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternKEVEXPLOITEDPATCHED

sma1000· CWE-918

sonicwall · CVE-2026-83549 — CVE-2026-83549: Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabiKEVEXPLOITEDPATCHED

sma1000· CVSS 7.8· CWE-78

rubygems · CVE-2026-66066 — Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processingKEVEXPLOITEDPATCHED

activestorage· CWE-1188

sangoma · CVE-2026-9586 — Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMBKEVEXPLOITEDPATCHED

switchvox smb edition· CVSS 9.0· CWE-89

papercut · CVE-2026-82078 — PaperCut MF/NG: Unsafe Dynamic Class Loading in Database ConnectorKEVEXPLOITEDPATCHED

papercut_mf· CWE-470

gitea · CVE-2026-60004 — CVE-2026-60004: Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.KEVEXPLOITEDPATCHED

gitea· CVSS 9.8· CWE-94

microsoft · CVE-2026-68820 — Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED

windows_10_1607· CVSS 7.0· CWE-416

papercut · CVE-2026-81578 — PaperCut MF/NG: Authentication BypassKEVEXPLOITEDPATCHED

papercut_mf· CWE-305

sonicwall · CVE-2026-15410 — CVE-2026-15410: Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SEXPLOITEDPATCHED

sma6210_firmware· CVSS 7.2· CWE-94

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS

serendipity projectCRITICAL1 sources

CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04

Latest news

[B]microsoft

Security Alert: Microsoft Releases May 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)

[B]microsoftCVE-2026-68820

Security Alert: Microsoft Releases August 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB25-119)

[B]microsoftCVE-2026-21510

Security Alert: Microsoft Releases February 2026 Security Updates

[B]microsoftCVE-2025-62221

Security Alert: Microsoft Releases December 2025 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44)

[B]microsoft

Security Alert: Microsoft Releases March 2026 Security Updates