Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2026-76418 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Unchecked Return Value to NULL Pointer Dereference in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) | CWE-690 | — | |
| CVE-2026-114625 | Arista NetworksVeloCloud Orchestrator (VCO) | SQL injection in VeloCloud Orchestrator (VCO) | CWE-89 | — | |
| CVE-2026-102764 | BeyondTrustRemote Support | Authentication Bypass by Spoofing in Remote Support | CWE-290 | — | |
| CVE-2026-0322 | Palo Alto Networks, Inc.Palo Alto PAN-OS | Code Injection in Palo Alto PAN-OS | CWE-94 | — | |
| CVE-2026-96951 | MicrosoftMicrosoft Windows | Command injection in Microsoft Windows and Windows Server | CWE-77 | — | |
| CVE-2026-104935 | IvantiIvanti Connect Secure (formerly Pulse Connect Secure) | Authentication Bypass by Spoofing in Ivanti Connect Secure (formerly Pulse Connect Secure) | CWE-290 | — | |
| CVE-2026-102490 | ZammadZammad | Incorrect default permissions in Zammad | CWE-276 | — | |
| CVE-2026-76504 | Cisco Systems, IncCatalyst SD-WAN Manager (formerly SD-WAN vManage) | Improper Handling of URL Encoding (Hex Encoding) in Catalyst SD-WAN Manager (formerly SD-WAN vManage) | CWE-177 | — | |
| CVE-2026-84411 | MikroTikMikroTik RouterOS | Integer overflow in MikroTik RouterOS | CWE-190 | — | |
| CVE-2026-106931 | EG Secure SolutionsSiteGuard Server Edition | OS Command Injection in SiteGuard Server Edition | CWE-78 | — | |
| CVE-2026-86950 | Apple Inc.Apple iOS | Out-of-bounds write in Apple iOS and iPadOS | CWE-787 | — | |
| CVE-2026-110447 | Collabora OnlineBuilt-in CODE Server app | OS Command Injection in Built-in CODE Server app | CWE-78 | — | |
| CVE-2026-67276 | MikroTikMikroTik RouterOS | Improper Verification of Cryptographic Signature in MikroTik RouterOS | CWE-347 | — | |
| CVE-2026-76904 | geoserverGeoServer | SQL injection in geotools | CWE-89 | — | |
| CVE-2026-15724 | CitrixShareFile storage zones controller | Path traversal in ShareFile storage zones controller | CWE-22 | — | |
| CVE-2026-1164 | GoogleGoogle Chrome | Buffer overflow in Google Chromium | CWE-119 | — | |
| CVE-2026-5426 | Digital KnowledgeKnowledgeDeliver | Use of hard-coded credentials in KnowledgeDeliver | CWE-798 | — | |
| CVE-2026-34424 | NextendSmart Slider 3 | Embedded malicious code (backdoor) in Smart Slider 3 | CWE-506 | — | |
| #VU124720 | axiosaxios | Embedded malicious code (backdoor) in axios | CWE-506 | — | |
| CVE-2026-21992 | OracleOracle Identity Manager Connector | Missing Authentication for Critical Function in Identity Manager and Oracle Web Services Manager | CWE-306 | — |
Showing 1–20 of 324 results