Zero Day Monitor

Zero Day Monitor

105744

New CVEs

251

Critical

0

Pre-CVE

1386

CISA KEV

1814

Articles

38/41

Feeds

Vulnerabilities

Cloud Software Group · CVE-2026-3055 — Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overreadKEVEXPLOITED

NetScaler ADC and NetScaler Gateway· CVSS 9.3· CWE-125

aquasec · CVE-2026-33634 — Trivy ecosystem supply chain briefly compromisedKEVEXPLOITED

setup-trivy· CVSS 8.8· CWE-506

langflow · CVE-2026-33017 — Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows withouKEVEXPLOITED

langflow· CVSS 9.3· CWE-94

gnu · CVE-2026-24061 — telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.KEVEXPLOITED

inetutils· CVSS 9.8· CWE-88

linux · CVE-2026-23400 — rust_binder: call set_notification_done() without proc lockEXPLOITED

linux kernel· CVSS 0.0

microsoft · CVE-2026-21510 — Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.KEVEXPLOITED

windows_10_1607· CVSS 8.8· CWE-693

micromatch · CVE-2026-33671 — Picomatch has a ReDoS vulnerability via extglob quantifiersEXPLOITED

picomatch· CVSS 7.5· CWE-1333

microsoft · CVE-2026-20805 — Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.KEVEXPLOITED

windows_10_1607· CVSS 5.5· CWE-200

isc · CVE-2026-3591 — A use-after-return vulnerability exists in the `named` server when handling DNS queries signed with SIG(0). Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperlyEXPLOITED

BIND 9· CVSS 7.5· CWE-305

oracle · CVE-2026-21962 — Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server ProxKEVEXPLOITED

http_server· CVSS 10.0· CWE-284

→ View full list

Urgent

aquasec setup-trivy

Cloud Software Group NetScaler ADC and NetScaler Gateway

linux linux kernel

linux linux kernel

langflow langflow