Zero Day MonitorZDM

Dashboard Vulnerabilities Trending Zero-Days News About

Impressum Privacy Policy

Zero Day Monitor © 2026

3376 articles · 142292 vulns · 36/41 feeds (7d)

Latest Security News

Recently analyzed articles from 41 RSS feeds across official advisories, government CERTs, security research, and community sources.

Tier A: Official

Tier B: Gov CERT

Tier C: Research

Tier D: News

Tier E: Community

Status:

All Analyzed Queued Signal Only

C

CVE-2026-44931 | malcontent 0.14.0 D-Bus API resource consumption

VulDB·3h ago·cve_linking

C

CVE-2026-8349 | omec-project amf up to 2.1.1 NGAP Message memory corruption (Issue 672)

VulDB·5h ago·cve_linking

C

CVE-2026-8346 | D-Link DIR-816 1.10CNB05_R1B011D88210 portForward ip_address command injection

VulDB·5h ago·cve_linking

C

CVE-2026-8345 | D-Link DIR-816 1.10CNB05_R1B011D88210 singlePortForward sub_445E7C ip_address command injection

VulDB·5h ago·cve_linking

C

CVE-2026-8344 | D-Link DIR-816 1.10CNB05_R1B011D88210 /goform/formDMZ.cgi sub_445E7C command injection

VulDB·5h ago·cve_linking

C

CVE-2025-65417 | docuFORM 11.11c Managed Print Service Client cross site scripting

VulDB·5h ago·cve_linking

C

CVE-2026-34091 | Wikimedia MediaWiki up to 1.43.6/1.44.3/1.45.1 information disclosure

VulDB·5h ago·cve_linking

C

CVE-2026-34090 | Wikimedia CheckUser 1.45.0/1.45.1 information disclosure

VulDB·5h ago·cve_linking

C

CVE-2026-34088 | Wikimedia MediaWiki up to 1.43.6/1.44.3/1.45.1 information disclosure

VulDB·5h ago·cve_linking

C

CVE-2026-34087 | Wikimedia OATHAuth up to 1.43.6/1.44.3/1.45.1 information disclosure

VulDB·5h ago·cve_linking

C

CVE-2026-34086 | Wikimedia AbuseFilter up to 1.43.6/1.44.3/1.45.1

VulDB·5h ago·cve_linking

C

CVE-2025-65418 | docuFORM 11.11c Managed Print Service Client path traversal

VulDB·5h ago·cve_linking

C

CVE-2025-65415 | docuForm 11.11c Managed Print Service Client session fixiation

VulDB·5h ago·cve_linking

C

CVE-2026-7817 | pgAdmin 4 up to 9.14 api_key_file/api_url server-side request forgery

VulDB·5h ago·cve_linking

C

CVE-2026-3320 | Cradle e-commerce HTML Output /product/ HTML injection

VulDB·5h ago·cve_linking

C

CVE-2026-3319 | Cradle e-commerce /collection/ cross site scripting

VulDB·5h ago·cve_linking

C

CVE-2026-6815 | Casdoor up to 2.328.0 path traversal

VulDB·5h ago·cve_linking

C

CVE-2026-31247 | Docling up to 2.61.0 xml external entity reference

VulDB·5h ago·cve_linking

C

CVE-2026-44643 | peerigon angular-expressions up to 1.5.1 eval injection

VulDB·5h ago·cve_linking

C

CVE-2026-7814 | pgAdmin 4 up to 9.14 Explain Visualizer cross site scripting

VulDB·5h ago·cve_linking

C

malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API (CVE-2026-44931)

oss-security·7h ago·cve_linking

C

CVE-2026-8321 | inkeep agents 0.58.14 runAuth Middleware runAuth.ts createDevContext authentication bypass (Issue 3024)

VulDB·8h ago·cve_linking

C

CVE-2026-8320 | jishenghua jshERP up to 3.6 updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode weixinUrl server-side request forgery (Issue 152)

VulDB·8h ago·cve_linking

C

CVE-2026-8319 | aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59 cheshire_cat_core stray_cat.py recall_relevant_memories_to_working_memory resource consumption (Issue 219)

VulDB·8h ago·cve_linking

D

Schadcode-Lücke bedroht IBM App Connect Enterprise und IBM Integration Bus

Heise Security·14h ago·cve_linking

C

CVE-2026-41018 | Apache Airflow Providers Elasticsearch up to 6.5.2 Elasticsearch task-log log file

VulDB·21h ago·cve_linking

C

CVE-2026-43826 | Apache Airflow Providers OpenSearch up to 1.9.0 OpenSearch task-log log file

VulDB·21h ago·cve_linking

C

CVE-2026-41018: Apache Airflow Providers Elasticsearch: Elasticsearch task-log handlers leak credentials embedded in the host URL

oss-security·1d ago·cve_linking

C

CVE-2026-43826: Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL

oss-security·1d ago·cve_linking

C

CVE-2026-8276 | bettercap up to 2.41.5 MySQL Server mysql_server.go integer coercion (Issue 1265)

VulDB·1d ago·cve_linking

C

CVE-2026-8275 | bettercap up to 2.41.5 zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion (Issue 1263)

VulDB·1d ago·cve_linking

C

CVE-2026-8274 | npitre cramfs-tools up to 2.1 Directory cramfsck.c do_directory path traversal

VulDB·1d ago·cve_linking

C

CVE-2026-8273 | D-Link DNS-320 2.06B01 /cgi-bin/system_mgr.cgi os command injection

VulDB·1d ago·cve_linking

C

CVE-2026-8272 | D-Link DNS-320 2.06B01 /cgi-bin/webfile_mgr.cgi delete/rename/copy/move/chmod/chown os command injection

VulDB·1d ago·cve_linking

C

CVE-2026-8269 | Open5GS up to 2.7.7 SMF smf_nsmf_handle_create_sm_context denial of service (Issue 4450)

VulDB·1d ago·cve_linking

C

CVE-2026-8268 | Open5GS up to 2.7.7 SMF OpenAPI_list_create denial of service (Issue 4449)

VulDB·1d ago·cve_linking

C

CVE-2026-8267 | Open5GS up to 2.7.7 SMF smf_nsmf_handle_created_data_in_vsmf denial of service (Issue 4448)

VulDB·1d ago·cve_linking

C

CVE-2026-8266 | Open5GS up to 2.7.7 SMF /src/smf/gsm-build.c gsm_build_pdu_session_establishment_accept denial of service (Issue 4447)

VulDB·1d ago·cve_linking

C

CVE-2026-8265 | Tenda AC6 15.03.06.23 httpd /goform/getLogFile get_log_file wans.flag os command injection

VulDB·1d ago·cve_linking

C

CVE-2026-8264 | Tenda AC6 15.03.06.23 httpd /goform/WifiApScan formWifiApScan wl2g.public.country/wl5g.public.country os command injection

VulDB·1d ago·cve_linking

C

CVE-2026-8263 | Tenda AC6 15.03.06.49_multi_TDE01 httpd /goform/WifiExtraSet fromSetWirelessRepeat mac/ssid os command injection

VulDB·1d ago·cve_linking

C

CVE-2026-8262 | Devs Palace ERP Online up to 4.0.0 /accounts/chart-save cross site scripting

VulDB·1d ago·cve_linking

C

CVE-2026-8260 | D-Link DCS-935L up to 1.10.01 HNAP Service hnap_service SetDeviceSettings AdminPassword buffer overflow

VulDB·1d ago·cve_linking

C

CVE-2026-8259 | Tenda AC6 2.0/15.03.06.23 httpd /goform/telnet lan.ip os command injection

VulDB·1d ago·cve_linking

C

CVE-2026-8258 | Squirrel up to 3.2 sqstdlib/sqstdstring.cpp validate_format stack-based overflow (Issue 325)

VulDB·1d ago·cve_linking

C

CVE-2026-8257 | WebAssembly Binaryen up to 117 BrOn Parser wasm-ir-builder.cpp IRBuilder::makeBrOn assertion (Issue 8633)

VulDB·1d ago·cve_linking

C

CVE-2026-8256 | Devs Palace ERP Online up to 4.0.0 /accounts/mr-save cross site scripting

VulDB·1d ago·cve_linking

C

CVE-2026-8255 | Devs Palace ERP Online up to 4.0.0 add_new_customer cross site scripting

VulDB·1d ago·cve_linking

C

CVE-2026-8254 | Devs Palace ERP Online up to 4.0.0 /inventory/sales_save cross site scripting

VulDB·1d ago·cve_linking

C

CVE-2026-8253 | Devs Palace ERP Online up to 4.0.0 /inventory/purchase_save cross site scripting

VulDB·1d ago·cve_linking

Articles are automatically fetched from RSS feeds, pre-filtered for security relevance, and analyzed by LLM for vulnerability extraction. View feed sources