CISA: software flaws known to be exploited in real attacks.
Tuesday 14 July 2026
4 records- Vulnerability
SMA1000 Appliances Server-Side Request Forgery Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-15409. Known to be used in ransomware campaigns.
- Vulnerability
SMA1000 Appliances Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-15410. Known to be used in ransomware campaigns.
- Vulnerability
Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-56155
- Vulnerability
SharePoint Server Missing Authentication for Critical Function Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-56164
Monday 13 July 2026
1 record- Vulnerability
IOS Cross-Site Request Forgery Vulnerability added to the US list of exploited vulnerabilities
CVE-2008-4128
Friday 10 July 2026
2 records- Vulnerability
Unrestricted Upload of File with Dangerous Type Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48939
- Vulnerability
Forms Unrestricted Upload of File with Dangerous Type Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-56291
Tuesday 7 July 2026
4 records- Vulnerability
Authorization Bypass Through User-Controlled Key Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-55255
- Vulnerability
SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48908
- Vulnerability
Page Builder Improper Access Control Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-56290
- Vulnerability
ColdFusion Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48282
Wednesday 1 July 2026
1 record- Vulnerability
SharePoint Server Deserialization of Untrusted Data Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-45659
Monday 29 June 2026
1 record- Vulnerability
Authentication Bypass Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48558
Thursday 25 June 2026
2 records- Vulnerability
Windchill and FlexPLM Improper Input Validation Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-12569. Known to be used in ransomware campaigns.
- Vulnerability
Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-20230