CISA: software flaws known to be exploited in real attacks.
Wednesday 19 August 2026
1 record- Vulnerability
Server-Side Request Forgery Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-64849
Tuesday 18 August 2026
4 records- Vulnerability
SharePoint Weak Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-55040
- Vulnerability
macOS Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-65400
- Vulnerability
Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-33824
- Vulnerability
VMware vCenter Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-59310
Monday 17 August 2026
1 record- Vulnerability
Ray Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-62593
Tuesday 11 August 2026
3 records- Vulnerability
Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-20349
- Vulnerability
Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-68820
- Vulnerability
SQL Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-72898
Friday 7 August 2026
1 record- Vulnerability
LoadMaster Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-8037
Wednesday 5 August 2026
1 record- Vulnerability
TeamCity Deserialization of Untrusted Data Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-63077
Tuesday 4 August 2026
3 records- Vulnerability
Tomcat Missing Encryption of Sensitive Data Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-34486
- Vulnerability
N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-18556
- Vulnerability
Langflow Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-9198