Zero Day Monitor

Zero Day MonitorZDM

22

+1 today

Exploited (7d)

285

+38 today

Critical (7d)

1895

CISA KEV

403

Pre-CVE

4641

+738 today

Articles (7d)

Threat Briefing

Global

Loading...

About Zero Day Monitor

Open-source vulnerability intelligence for security teams. The platform scans 41 security feeds, analyzes articles with AI, and surfaces the threats that matter. Track trending CVEs, discover zero-days before they get a CVE ID, and monitor your vendor stack for supply-chain risks.

Trending

Ranked by source count

Zero-Days

Pre-CVE detection

Verification

Community-driven

Open Source

AGPL-3.0 licensed

Learn more about the project Sign in for personalized features

Vulnerabilities

gitlab · CVE-2026-85706 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabKEVEXPLOITEDPATCHED

gitlab· CVSS 10.0· CWE-22

bricksforge · CVE-2026-85097 — Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' ParameterKEVEXPLOITED

bricksforge· CVSS 9.8· CWE-434

citrix · CVE-2026-88779 — Memory overflow vulnerability leading to Denial of ServiceKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller

papercut · CVE-2026-81578 — PaperCut MF/NG: Authentication BypassKEVEXPLOITEDPATCHED

papercut_mf· CWE-305

citrix · CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller· CWE-20

papercut · CVE-2026-82078 — PaperCut MF/NG: Unsafe Dynamic Class Loading in Database ConnectorKEVEXPLOITEDPATCHED

papercut_mf· CWE-470

microsoft · CVE-2026-85880 — Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED

windows_10_1607· CVSS 7.8· CWE-122

microsoft · CVE-2026-81963 — Windows Update Stack Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED

windows_11_23h2· CVSS 7.8· CWE-59

citrix · CVE-2026-88772 — Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceKEVEXPLOITEDPATCHED

netscaler_application_delivery_controller

sonicwall · CVE-2026-102255 — CVE-2026-102255: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternPATCHED

sma1000· CVSS 10.0· CWE-918

→ View full list

Pre-CVE Events

ZERO-DAYCisco Advance Notification for Publication of July 1, 2026, Security Advisories

cisco1 sourcesverified

ZERO-DAYMalicious Code Injection via Axios npm Package Maintainer Account Takeover

axiosMEDIUM1 sourcesverified

ZERO-DAYADV990001 Latest Servicing Stack Updates

1 sourcesverified

Multiple Vulnerabilities in MapServer

mapserver team (osgeo foundation implied by download links and mailing list context, but not explicitly stated as vendor in text for the vulnerabilities themselves.)1 sources

Serendipity 2.6.0 Multiple Security Vulnerabilities Including Username Takeover and XSS

serendipity projectCRITICAL1 sources

Latest news

[B]microsoft

Security Alert: Microsoft Releases March 2026 Security Updates

[B]adobe

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)

[B]microsoft

Security Alert: Microsoft Releases May 2026 Security Updates

[B]microsoftCVE-2026-42897

Security Alert: Microsoft Releases June 2026 Security Updates

[B]microsoftCVE-2026-21510

Security Alert: Microsoft Releases February 2026 Security Updates

[B]adobeCVE-2026-27220

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)

[B]microsoftCVE-2026-68820

Security Alert: Microsoft Releases August 2026 Security Updates

[B]microsoftCVE-2025-62221

Security Alert: Microsoft Releases December 2025 Security Updates