KEV changelog
New KEV entries
Everything CISA added to the Known Exploited Vulnerabilities catalog in the last 30 days. Every entry here is exploited in the wild — that is the catalog's entry criterion, not our assessment.
Advertisement
Jul 29, 2026 (1)
-
Cisco — Secure Firewall Management Center (FMC)
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Our coverage: Cisco FMC CVE-2026-20316: Static Credentials Actively Exploited CVE-2026-20316: Cisco Secure FMC Hard-coded Password Vulnerability
Jul 27, 2026 (2)
-
Arista — VeloCloud Orchestrator
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Our coverage: CVE-2026-16812: Arista VeloCloud Orchestrator Command Injection Exploit
-
Fortinet — FortiOS
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Our coverage: CVE-2025-68686: Fortinet FortiOS Patch Bypass for Post-Exploit Persistence
Jul 22, 2026 (2)
-
Microsoft — SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Our coverage: CVE-2026-50522: SharePoint RCE Exploitation to Steal Machine Keys CVE-2026-50522: SharePoint RCE via Deserialization — Patch Now
-
Check Point — SmartConsole
Check Point SmartConsole Improper Authentication Vulnerability
Our coverage: Check Point CVE-2026-16232: Zero-Day Exploit Targeting VPN Gateways Check Point SmartConsole CVE-2026-16232 Auth Bypass — Patch Now CVE-2026-16232: Check Point SmartConsole Admin Bypass via Auth Flaw
Jul 21, 2026 (4)
-
WordPress — Core
WordPress Core Interpretation Conflict Vulnerability
Our coverage: CVE-2026-63030: WordPress Core SQLi Leads to Unauth RCE WordPress Core RCE via CVE-2026-63030 — wp2shell Mitigation Guide WP2Shell Vulnerabilities CVE-2026-60137 & CVE-2026-63030 Exploited
-
WordPress — Core
WordPress Core SQL Injection Vulnerability
Our coverage: CVE-2026-60137: WordPress Core SQL Injection to RCE — Patch Now WordPress Core RCE via CVE-2026-63030 — wp2shell Mitigation Guide WP2Shell Vulnerabilities CVE-2026-60137 & CVE-2026-63030 Exploited
-
Langflow — Langflow
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
-
DD-WRT — DD-WRT
DD-WRT Stack-Based Buffer Overflow Vulnerability
Jul 16, 2026 (3)
-
Microsoft — SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Our coverage: CVE-2026-58644: SharePoint RCE Zero-Day Exploited in the Wild
-
Fortinet — FortiSandbox
Fortinet FortiSandbox OS Command Injection Vulnerability
Our coverage: Fortinet FortiSandbox: Attackers Exploit CVE-2026-39813, -39808, -25089
-
Fortinet — FortiSandbox
Fortinet FortiSandbox OS Command Injection Vulnerability
Our coverage: Fortinet FortiSandbox: Attackers Exploit CVE-2026-39813, -39808, -25089 FortiSandbox Command Injection (CVE-2026-25089) & Critical Vendor Patches
Jul 15, 2026 (2)
-
Oracle — E-Business Suite
Oracle E-Business Suite Improper Privilege Management Vulnerability
-
KNX Association — KNX Protocol Connection Authorization Option 1
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
Jul 14, 2026 (4)
-
Microsoft — SharePoint Server
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
-
Microsoft — Active Directory Federation Services
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
-
SonicWall — SMA1000 Appliances
SonicWall SMA1000 Appliances Code Injection Vulnerability
Our coverage: CVE-2026-15409: SonicWall SMA 1000 Zero-Day Patch Guide SonicWall SMA1000 Series RCE via CVE-2026-15409 — Mitigation Guide SonicWall Zero-Days CVE-2026-15409 & CVE-2026-15410 Under Active Exploit
-
SonicWall — SMA1000 Appliances
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Our coverage: CVE-2026-15409: SonicWall SMA 1000 Zero-Day Patch Guide SonicWall SMA 1000 Series Zero-Days CVE-2026-15409 - Mitigation Guide SonicWall SMA1000 Series RCE via CVE-2026-15409 — Mitigation Guide
Jul 13, 2026 (1)
-
Cisco — IOS
Cisco IOS Cross-Site Request Forgery Vulnerability
Jul 10, 2026 (2)
-
Balbooa — Forms
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
-
iCagenda — iCagenda
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
Our coverage: Joomla RCE via CVE-2026-48939 and CVE-2026-38294 — Mitigation Guide
Jul 7, 2026 (4)
-
Joomlack — Page Builder
Joomlack Page Builder Improper Access Control Vulnerability
-
Langflow — Langflow
Langflow Authorization Bypass Through User-Controlled Key Vulnerability
-
JoomShaper — SP Page Builder
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
-
Adobe — ColdFusion
Adobe ColdFusion Path Traversal Vulnerability
Our coverage: CVE-2026-48282: Adobe ColdFusion Path Traversal RCE — Patch Now
Source: CISA KEV catalog. Refreshed every ingestion run. See also the full CVE tracker.