Zero-Day Intelligence & Advisory Desk

Zero-Day Advisory Editor

Draft, review and broadcast zero-day advisories. Save work in progress as a draft, or raise an emergency broadcast that pushes the advisory to every affected client dashboard within seconds.

Active Zero-Days 1,284 ▲ 62 this week

Critical Severity 46 9 currently unpatched

Weaponized In Wild 37 ● Active exploitation confirmed

Advisories Published 418 ▲ 12 broadcast this month

Open Drafts 7 ● 3 escalated for review

Dashboards Reached 312 ▲ 18 new clients this month

Advisory Editor

Complete the CVE details, set the severity level and define the affected scope. Drafts are private to the intelligence team until explicitly broadcast.

Draft — Not Published

Identifiers

CVE ID Format: CVE-YYYY-NNNNN

Vendor / Project

CVSS v3.1 Base Score 0.0 – 10.0

Disclosure Date (UTC)

Severity Level

Critical CVSS 9.0 – 10.0 High CVSS 7.0 – 8.9 Medium CVSS 4.0 – 6.9 Low CVSS 0.1 – 3.9

Weaponized in the wild Public PoC available Pre-auth exploitable Vendor patch available

Advisory Title

Headline 0 / 140 Use the pattern: Product — impact in plain language. Avoid exploit detail in the headline.

Affected Scope

Affected Products, Versions, Platforms or Hosts Press Enter to add

Quick add:

Add every product, version range, platform or client host class the advisory applies to. The broadcast engine matches these against client asset inventories.

Technical Summary & Guidance

Technical Summary 0 / 1200

Remediation Guidance 0 / 900

References One URL per line

Recently Published Advisories

Last six advisories pushed to client dashboards, with broadcast reach and remediation state.

418 Published

Recently published zero-day advisories
CVE ID	Advisory Title	Severity	Broadcast	Reach	Status
CVE-2026-21447	Apache Struts 2 — OGNL injection RCE Web & API · Struts 2.0.0 – 2.5.32	Critical	24 Sep · 14:36	312	Unpatched
CVE-2026-0091	Cisco IOS XE — Web UI authentication bypass Network & Edge · IOS XE 17.x	Critical	24 Sep · 14:35	284	Patch in progress
CVE-2026-3327	Oracle WebLogic — deserialization RCE Web & API · WebLogic 12.2.1.x	High	24 Sep · 14:32	196	Unpatched
CVE-2026-18820	Windows Print Spooler — privilege escalation Endpoint / Desktop · Windows 10 / 11	High	24 Sep · 14:28	298	Patched
CVE-2025-53112	Google Chrome V8 — type confusion in JIT Endpoint / Desktop · Chrome < 128.0.6	Critical	24 Sep · 14:25	305	Patched
CVE-2026-1104	Linux Kernel io_uring — use-after-free OT / ICS · Kernel 6.4 – 6.9	High	24 Sep · 14:21	152	Patched
Broadcast reach counts unique client dashboards that acknowledged the advisory within 24 hours.

Publish Controls

Save the advisory as a private draft, or raise an emergency broadcast to every affected client dashboard.

Editorial State

Current status Draft

Last saved Never

Severity set Not set

Scope entries 0

Author e.reed

Actions

Broadcasts are irreversible once dispatched. Verify the severity and scope before confirming.

Emergency broadcast pushes the advisory to every matching client dashboard, issues email and SMS alerts to registered contacts, and opens a SEV-1 audit event.

Estimated Broadcast Reach

Client dashboards 312

Email contacts 486

SMS / on-call 74

Incident commander 1

Open Drafts

Work in progress, private to the intelligence team.

CVE-2026-40118 Critical

Kubernetes ingress-nginx — admission webhook bypass

e.reed · 12 min ago Unsaved changes

CVE-2026-39980 High

PostgreSQL — privilege escalation via extension loading

f.hassan · 2 hours ago Awaiting reviewer

CVE-2026-38771 Medium

Redis — ACL bypass in sentinel failover path

d.mwangi · Yesterday Needs scope entries

Client Dashboard Preview

Live rendering of how this advisory appears to clients.

CVE-XXXX-XXXXX No severity

Advisory title will appear here

No scope entries

Source: VUNVAULT Intelligence Not dated

Zero-Day Advisory Editor

Zero-day intelligence indicators

Advisory Editor

Recently Published Advisories