CISA: software flaws known to be exploited in real attacks.
Monday 3 August 2026
1 record- Vulnerability
N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-18577
Wednesday 29 July 2026
1 record- Vulnerability
Secure Firewall Management Center Use of Hard-coded Password Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-20316
Monday 27 July 2026
2 records- Vulnerability
FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-68686
- Vulnerability
VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-16812
Wednesday 22 July 2026
2 records- Vulnerability
SmartConsole Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-16232
- Vulnerability
SharePoint Deserialization of Untrusted Data Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-50522
Tuesday 21 July 2026
4 records- Vulnerability
Stack-Based Buffer Overflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2021-27137
- Vulnerability
Inclusion of Functionality from Untrusted Control Sphere Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-0770
- Vulnerability
Core SQL Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-60137
- Vulnerability
Core Interpretation Conflict Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-63030
Thursday 16 July 2026
3 records- Vulnerability
FortiSandbox OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-25089
- Vulnerability
FortiSandbox OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-39808
- Vulnerability
SharePoint Deserialization of Untrusted Data Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-58644
Wednesday 15 July 2026
2 records- Vulnerability
KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability added to the US list of exploited vulnerabilities
CVE-2023-4346
- Vulnerability
E-Business Suite Improper Privilege Management Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-46817