CISA: software flaws known to be exploited in real attacks.
Monday 31 August 2026
2 records- Vulnerability
NG/MF Missing Authentication for Critical Function Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-81578
- Vulnerability
NG/MF Unsafe Reflection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-82078
Thursday 27 August 2026
3 records- Vulnerability
Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2023-49105
- Vulnerability
Kernel Unspecified Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-53362
- Vulnerability
Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-66384
Wednesday 26 August 2026
6 records- Vulnerability
Deserialization of Untrusted Data Vulnerability added to the US list of exploited vulnerabilities
CVE-2021-23758
- Vulnerability
Libuser Race Condition Vulnerability added to the US list of exploited vulnerabilities
CVE-2015-3246
- Vulnerability
Automatic Bug Reporting Tool Privilege Escalation Vulnerability added to the US list of exploited vulnerabilities
CVE-2015-5287
- Vulnerability
Kernel Out-of-Bounds Write Vulnerability added to the US list of exploited vulnerabilities
CVE-2022-0995
- Vulnerability
NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-8452
- Vulnerability
SQL Server Remote Code Execution Vulnerability added to the US list of exploited vulnerabilities
CVE-2019-1068
Tuesday 25 August 2026
1 record- Vulnerability
Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-60004
Monday 24 August 2026
1 record- Vulnerability
HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-21962
Friday 21 August 2026
1 record- Vulnerability
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-73570
Thursday 20 August 2026
2 records- Vulnerability
Server Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-72530
- Vulnerability
Server Missing Authentication for Critical Function Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-72529