Zero Day Monitor

Zero Day MonitorZDM

30

+3 today

Exploited (7d)

136

+32 today

Critical (7d)

1885

CISA KEV

403

Pre-CVE

4806

+833 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

jfrog · CVE-2026-82329 — Potential authentication bypass leading to administrative access in ArtifactoryKEVEXPLOITEDPATCHED

artifactory· CVSS 9.8· CWE-287

citrix · CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller· CWE-20

Cisco · CVE-2026-76504 — Cisco Catalyst SD-WAN Manager System Account Authorization Bypass VulnerabilityKEVEXPLOITED

Cisco Catalyst SD-WAN Manager· CVSS 9.8· CWE-177

synacor · CVE-2026-73570 — CVE-2026-73570: A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp KEVEXPLOITEDPATCHED

zimbra_collaboration_suite· CVSS 8.9· CWE-78

gitlab · CVE-2026-85706 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabKEVEXPLOITEDPATCHED

gitlab· CVSS 10.0· CWE-22

apple · CVE-2026-86950 — CVE-2026-86950: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 2KEVEXPLOITEDPATCHED

ipados· CVSS 8.8

citrix · CVE-2026-88772 — Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller

mikrotik · CVE-2026-67276 — SSH user impersonation possible in Mikrotik RouterOSKEVEXPLOITEDPATCHED

routeros· CWE-347

mikrotik · CVE-2026-86060 — SSH session privilege manipulation via a crafted username in Mikrotik RouterOSKEVEXPLOITEDPATCHED

routeros· CWE-88

checkpoint · CVE-2026-85102 — Improper Certificate Validation in Quantum Security GatewayKEVEXPLOITED

gaia_embedded· CVSS 9.8· CWE-295

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Multiple Vulnerabilities in MapServer

mapserver team (osgeo foundation implied by download links and mailing list context, but not explicitly stated as vendor in text for the vulnerabilities themselves.)1 sources

Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS

serendipity projectCRITICAL1 sources

Latest news

[B]microsoftCVE-2026-85880

Security Alert: Microsoft Releases September 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)

[B]microsoft

Security Alert: Microsoft Releases May 2026 Security Updates

[B]adobeCVE-2026-27220

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)