CISA - Known Exploited Vulnerabilities Catalog

Recent Items

CVE-2026-56164 - Confirmed Exploitation

<h3>CVE-2026-56164</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-14 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-14 Asserted: 2026-07-14 Scope Notes: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | Affected: Microsoft / SharePoint Server | Description: Microsoft SharePoint …

Published on 2026-07-14T00:00:00+00:00

Updated on 2026-07-14T19:00:02.352668+00:00

CVE-2026-15409 - Confirmed Exploitation

<h3>CVE-2026-15409</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-14 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-14 Asserted: 2026-07-14 Scope Notes: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | Affected: SonicWall / SMA1000 Appliances | Description: SonicWall SMA1000 Appliances contain…

Published on 2026-07-14T00:00:00+00:00

Updated on 2026-07-14T20:00:01.655246+00:00

CVE-2026-56155 - Confirmed Exploitation

<h3>CVE-2026-56155</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-14 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-14 Asserted: 2026-07-14 Scope Notes: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | Affected: Microsoft / Active Directory Federation Services…

Published on 2026-07-14T00:00:00+00:00

Updated on 2026-07-14T19:00:02.270525+00:00

CVE-2026-15410 - Confirmed Exploitation

<h3>CVE-2026-15410</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-14 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-14 Asserted: 2026-07-14 Scope Notes: SonicWall SMA1000 Appliances Code Injection Vulnerability | Affected: SonicWall / SMA1000 Appliances | Description: SonicWall SMA1000 Appliances contain a code injec…

Published on 2026-07-14T00:00:00+00:00

Updated on 2026-07-14T20:00:01.834959+00:00

CVE-2008-4128 - Confirmed Exploitation

<h3>CVE-2008-4128</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-13 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-13 Asserted: 2026-07-13 Scope Notes: Cisco IOS Cross-Site Request Forgery Vulnerability | Affected: Cisco / IOS | Description: Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that all…

Published on 2026-07-13T00:00:00+00:00

Updated on 2026-07-13T18:00:01.842612+00:00

CVE-2026-56291 - Confirmed Exploitation

<h3>CVE-2026-56291</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-10 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-10 Asserted: 2026-07-10 Scope Notes: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: Balbooa / Forms | Description: Balbooa Forms contains an unrestricted upload …

Published on 2026-07-10T00:00:00+00:00

Updated on 2026-07-10T18:00:02.597504+00:00

CVE-2026-48939 - Confirmed Exploitation

<h3>CVE-2026-48939</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-10 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-10 Asserted: 2026-07-10 Scope Notes: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: iCagenda / iCagenda | Description: iCagenda contains an unrestricted upload of fil…

Published on 2026-07-10T00:00:00+00:00

Updated on 2026-07-10T18:00:02.701206+00:00

CVE-2026-48282 - Confirmed Exploitation

<h3>CVE-2026-48282</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEV entry: Adobe ColdFusion Path Traversal Vulnerability | Affected: Adobe / ColdFusion | Description: Adobe ColdFusion contains a path traversal vulnerability that …

Published on 2026-07-07T00:00:00+00:00

Updated on 2026-07-07T20:00:02.626357+00:00

CVE-2026-56290 - Confirmed Exploitation

<h3>CVE-2026-56290</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEV entry: Joomlack Page Builder Improper Access Control Vulnerability | Affected: Joomlack / Page Builder | Description: Joomlack Page Builder contains an improper …

Published on 2026-07-07T00:00:00+00:00

Updated on 2026-07-07T18:00:31.872519+00:00

CVE-2026-48908 - Confirmed Exploitation

<h3>CVE-2026-48908</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEV entry: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: JoomShaper / SP Page Builder | Description: JoomShape…

Published on 2026-07-07T00:00:00+00:00

Updated on 2026-07-07T18:00:02.317978+00:00

CVE-2026-55255 - Confirmed Exploitation

<h3>CVE-2026-55255</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEV entry: Langflow Authorization Bypass Through User-Controlled Key Vulnerability | Affected: Langflow / Langflow | Description: Langflow contains an authorization …

Published on 2026-07-07T00:00:00+00:00

Updated on 2026-07-07T18:00:02.403515+00:00

CVE-2026-45659 - Confirmed Exploitation

<h3>CVE-2026-45659</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-01 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-01 Asserted: 2026-07-01 Scope Notes: KEV entry: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | Affected: Microsoft / SharePoint Server | Description: Microsoft SharePoint …

Published on 2026-07-01T00:00:00+00:00

Updated on 2026-07-01T20:00:01.616698+00:00

CVE-2026-48558 - Confirmed Exploitation

<h3>CVE-2026-48558</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-29 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-29 Asserted: 2026-06-29 Scope Notes: KEV entry: SimpleHelp Authentication Bypass Vulnerability | Affected: SimpleHelp / SimpleHelp | Description: SimpleHelp contains an authentication bypass vulnerabil…

Published on 2026-06-29T00:00:00+00:00

Updated on 2026-06-29T20:00:01.988851+00:00

CVE-2026-12569 - Confirmed Exploitation

<h3>CVE-2026-12569</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-25 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-25 Asserted: 2026-06-25 Scope Notes: KEV entry: PTC Windchill and FlexPLM Improper Input Validation Vulnerability | Affected: PTC / Windchill and FlexPLM | Description: PTC Windchill and FlexPLM contain…

Published on 2026-06-25T00:00:00+00:00

Updated on 2026-06-25T20:00:01.914560+00:00

CVE-2026-20230 - Confirmed Exploitation

<h3>CVE-2026-20230</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-25 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-25 Asserted: 2026-06-25 Scope Notes: KEV entry: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | Affected: Cisco / Unified Communications Manager | Description: Ci…

Published on 2026-06-25T00:00:00+00:00

Updated on 2026-06-25T20:00:02.000436+00:00

CVE-2026-34909 - Confirmed Exploitation

<h3>CVE-2026-34909</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEV entry: Ubiquiti UniFi OS Path Traversal Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains a path traversal vulnerability wh…

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T18:00:02.510704+00:00

CVE-2026-34910 - Confirmed Exploitation

<h3>CVE-2026-34910</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEV entry: Ubiquiti UniFi OS Improper Input Validation Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains an improper input vali…

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T18:00:02.436128+00:00

CVE-2026-34908 - Confirmed Exploitation

<h3>CVE-2026-34908</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEV entry: Ubiquiti UniFi OS Improper Access Control Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains an improper access contr…

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T18:00:02.589393+00:00

CVE-2025-67038 - Confirmed Exploitation

<h3>CVE-2025-67038</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEV entry: Lantronix EDS5000 Code Injection Vulnerability | Affected: Lantronix / EDS5000 | Description: Lantronix EDS5000 contains a code injection vulnerability th…

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T18:00:02.348917+00:00

CVE-2026-20253 - Confirmed Exploitation

<h3>CVE-2026-20253</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-18 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-18 Asserted: 2026-06-18 Scope Notes: KEV entry: Splunk Enterprise Missing Authentication for Critical Function Vulnerability | Affected: Splunk / Enterprise | Description: Splunk Enterprise contains a m…

Published on 2026-06-18T00:00:00+00:00

Updated on 2026-06-18T17:00:02.984706+00:00