CISA: software flaws known to be exploited in real attacks.
Showing Tuesday 14 July 2026. Back to the latest
Tuesday 14 July 2026
4 records- Vulnerability
SMA1000 Appliances Server-Side Request Forgery Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-15409. Known to be used in ransomware campaigns.
- Vulnerability
SMA1000 Appliances Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-15410. Known to be used in ransomware campaigns.
- Vulnerability
Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-56155
- Vulnerability
SharePoint Server Missing Authentication for Critical Function Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-56164