CISA: software flaws known to be exploited in real attacks.
Tuesday 23 June 2026
4 records- Vulnerability
UniFi OS Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-34909
- Vulnerability
EDS5000 Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-67038
- Vulnerability
UniFi OS Improper Input Validation Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-34910
- Vulnerability
UniFi OS Improper Access Control Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-34908
Thursday 18 June 2026
1 record- Vulnerability
Enterprise Missing Authentication for Critical Function Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-20253
Tuesday 16 June 2026
1 record- Vulnerability
Joomla Content Editor Improper Access Control Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48907
Monday 15 June 2026
2 records- Vulnerability
Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-20262
- Vulnerability
cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-54420
Friday 12 June 2026
1 record- Vulnerability
PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-35273. Known to be used in ransomware campaigns.
Thursday 11 June 2026
1 record- Vulnerability
Sentry OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-10520
Tuesday 9 June 2026
3 records- Vulnerability
Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-7473
- Vulnerability
Chromium V8 Out-of-Bounds Read and Write Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-11645
- Vulnerability
Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-20245