CISA: software flaws known to be exploited in real attacks.
Monday 14 September 2026
1 record- Vulnerability
Secure Email Gateway SQL Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-76461
Friday 11 September 2026
4 records- Vulnerability
Community Edition and Enterprise Edition Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-85706
- Vulnerability
ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-84869
- Vulnerability
Artifactory Incorrect Authorization Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-42016
- Vulnerability
Artifactory Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-42018
Thursday 10 September 2026
2 records- Vulnerability
RouterOS Missing Authentication for Critical Function Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-67277
- Vulnerability
RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-86060
Wednesday 9 September 2026
4 records- Vulnerability
NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-19490
- Vulnerability
Multiple Products Heap-based Buffer Overflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-25249
- Vulnerability
Chromium V8 Out of Bounds Write Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-87491
- Vulnerability
Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-20079
Tuesday 8 September 2026
4 records- Vulnerability
Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-75650
- Vulnerability
Windows Link Following Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-81963
- Vulnerability
N-central Static Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-86218
- Vulnerability
Windows Heap-Based Buffer Overflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-85880
Friday 4 September 2026
1 record- Vulnerability
Chromium V8 Type Confusion Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-85046
Wednesday 2 September 2026
7 records- Vulnerability
Artifactory Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-82329
- Vulnerability
LiteLLM Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-59822
- Vulnerability
Starlette HTTP Request/Response Smuggling Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48710
- Vulnerability
OSS OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-49869
- Vulnerability
Switchvox SQL Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-9586
- Vulnerability
SMA1000 Appliances Server-Side Request Forgery Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-83548
- Vulnerability
SMA1000 Appliances OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-83549