Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2026-102490 | ZammadZammad | Incorrect default permissions in Zammad | CWE-276 | — | |
| CVE-2026-102489 | ZammadZammad | Session fixation in Zammad | CWE-384 | ENISA KEV | |
| CVE-2026-104286 | Fortinet, IncFortiMail | Path traversal in FortiMail | CWE-22 | CISA KEV | |
| CVE-2026-76504 | Cisco Systems, IncCatalyst SD-WAN Manager (formerly SD-WAN vManage) | Improper Handling of URL Encoding (Hex Encoding) in Catalyst SD-WAN Manager (formerly SD-WAN vManage) | CWE-177 | — | |
| CVE-2026-86950 | Apple Inc.Apple iOS | Out-of-bounds write in Apple iOS and iPadOS | CWE-787 | — | |
| CVE-2026-88772 | CitrixCitrix Netscaler ADC | Buffer overflow in Citrix Netscaler ADC and Citrix NetScaler Gateway | CWE-119 | CISA KEV | |
| CVE-2026-88771 | CitrixCitrix Netscaler ADC | Input validation error in Citrix Netscaler ADC and Citrix NetScaler Gateway | CWE-20 | CISA KEV | |
| CVE-2026-93952 | Arista NetworksVeloCloud Orchestrator (VCO) | Input validation error in VeloCloud Orchestrator (VCO) | CWE-20 | CISA KEV | |
| CVE-2026-94127 | F5 NetworksBIG-IP APM | Heap-based buffer overflow in BIG-IP and BIG-IP APM | CWE-122 | CISA KEV | |
| CVE-2026-93616 | Check Point Software TechnologiesGaia | Arbitrary file upload in Gaia | CWE-434 | CISA KEV | |
| CVE-2026-58704 | GooglePixel | Improper input validation in Pixel | CWE-20 | CISA KEV | |
| CVE-2026-76460 | Cisco Systems, IncCisco Identity Services Engine (ISE) | Incorrect use of privileged APIs in Cisco Identity Services Engine (ISE) | CWE-648 | CISA KEV | |
| CVE-2026-87886 | AcronisAcronis Backup plugin for cPanel & WHM for Linux | Incorrect default permissions in Acronis Backup extension for Plesk for Linux and Acronis Backup plugin for cPanel & WHM for Linux | CWE-276 | CISA KEV | |
| CVE-2026-76461 | Cisco Systems, IncSecure Email Gateway | SQL injection in Secure Email Gateway | CWE-89 | CISA KEV | |
| CVE-2026-87491 | GoogleGoogle Chrome | Out-of-bounds write in Google Chromium | CWE-787 | CISA KEV | |
| CVE-2026-85880 | MicrosoftMicrosoft Windows | Heap-based buffer overflow in Microsoft Windows and Windows Server | CWE-122 | CISA KEV | |
| CVE-2026-81963 | MicrosoftMicrosoft Windows | Insecure link following in Microsoft Windows and Windows Server | CWE-59 | CISA KEV | |
| CVE-2026-75650 | AdobeAdobe Commerce (formerly Magento Commerce) | Template injection in Adobe products | CWE-1336 | CISA KEV | |
| CVE-2026-85046 | GoogleGoogle Chrome | Type Confusion in Google Chromium | CWE-843 | CISA KEV | |
| CVE-2026-67276 | MikroTikMikroTik RouterOS | Improper Verification of Cryptographic Signature in MikroTik RouterOS | CWE-347 | — |
Showing 1–20 of 1,010 results