Visit Website →

Recent Items

CVE-2026-56291 - Confirmed Exploitation

CVE-2026-56291

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-10 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-10

Asserted: 2026-07-10

Scope Notes: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: Balbooa / Forms | Description: Balbooa Forms contains an unrestricted upload …

Published on Fri, 10 Jul 2026 00:00:00 +0000

CVE-2026-48939 - Confirmed Exploitation

CVE-2026-48939

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-10 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-10

Asserted: 2026-07-10

Scope Notes: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: iCagenda / iCagenda | Description: iCagenda contains an unrestricted upload of fil…

Published on Fri, 10 Jul 2026 00:00:00 +0000

CVE-2026-48282 - Confirmed Exploitation

CVE-2026-48282

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEV entry: Adobe ColdFusion Path Traversal Vulnerability | Affected: Adobe / ColdFusion | Description: Adobe ColdFusion contains a path traversal vulnerability that …

Published on Tue, 07 Jul 2026 00:00:00 +0000

CVE-2026-56290 - Confirmed Exploitation

CVE-2026-56290

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEV entry: Joomlack Page Builder Improper Access Control Vulnerability | Affected: Joomlack / Page Builder | Description: Joomlack Page Builder contains an improper …

Published on Tue, 07 Jul 2026 00:00:00 +0000

CVE-2026-55255 - Confirmed Exploitation

CVE-2026-55255

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEV entry: Langflow Authorization Bypass Through User-Controlled Key Vulnerability | Affected: Langflow / Langflow | Description: Langflow contains an authorization …

Published on Tue, 07 Jul 2026 00:00:00 +0000

CVE-2026-48908 - Confirmed Exploitation

CVE-2026-48908

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEV entry: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: JoomShaper / SP Page Builder | Description: JoomShape…

Published on Tue, 07 Jul 2026 00:00:00 +0000

CVE-2026-45659 - Confirmed Exploitation

CVE-2026-45659

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-01 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-01

Asserted: 2026-07-01

Scope Notes: KEV entry: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | Affected: Microsoft / SharePoint Server | Description: Microsoft SharePoint …

Published on Wed, 01 Jul 2026 00:00:00 +0000

CVE-2026-48558 - Confirmed Exploitation

CVE-2026-48558

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-29 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-29

Asserted: 2026-06-29

Scope Notes: KEV entry: SimpleHelp Authentication Bypass Vulnerability | Affected: SimpleHelp / SimpleHelp | Description: SimpleHelp contains an authentication bypass vulnerabil…

Published on Mon, 29 Jun 2026 00:00:00 +0000

CVE-2026-12569 - Confirmed Exploitation

CVE-2026-12569

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-25 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-25

Asserted: 2026-06-25

Scope Notes: KEV entry: PTC Windchill and FlexPLM Improper Input Validation Vulnerability | Affected: PTC / Windchill and FlexPLM | Description: PTC Windchill and FlexPLM contain…

Published on Thu, 25 Jun 2026 00:00:00 +0000

CVE-2026-20230 - Confirmed Exploitation

CVE-2026-20230

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-25 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-25

Asserted: 2026-06-25

Scope Notes: KEV entry: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | Affected: Cisco / Unified Communications Manager | Description: Ci…

Published on Thu, 25 Jun 2026 00:00:00 +0000

CVE-2026-34908 - Confirmed Exploitation

CVE-2026-34908

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-23 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-23

Asserted: 2026-06-23

Scope Notes: KEV entry: Ubiquiti UniFi OS Improper Access Control Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains an improper access contr…

Published on Tue, 23 Jun 2026 00:00:00 +0000

CVE-2025-67038 - Confirmed Exploitation

CVE-2025-67038

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-23 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-23

Asserted: 2026-06-23

Scope Notes: KEV entry: Lantronix EDS5000 Code Injection Vulnerability | Affected: Lantronix / EDS5000 | Description: Lantronix EDS5000 contains a code injection vulnerability th…

Published on Tue, 23 Jun 2026 00:00:00 +0000

CVE-2026-34910 - Confirmed Exploitation

CVE-2026-34910

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-23 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-23

Asserted: 2026-06-23

Scope Notes: KEV entry: Ubiquiti UniFi OS Improper Input Validation Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains an improper input vali…

Published on Tue, 23 Jun 2026 00:00:00 +0000

CVE-2026-34909 - Confirmed Exploitation

CVE-2026-34909

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-23 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-23

Asserted: 2026-06-23

Scope Notes: KEV entry: Ubiquiti UniFi OS Path Traversal Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains a path traversal vulnerability wh…

Published on Tue, 23 Jun 2026 00:00:00 +0000

CVE-2026-20253 - Confirmed Exploitation

CVE-2026-20253

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-18 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-18

Asserted: 2026-06-18

Scope Notes: KEV entry: Splunk Enterprise Missing Authentication for Critical Function Vulnerability | Affected: Splunk / Enterprise | Description: Splunk Enterprise contains a m…

Published on Thu, 18 Jun 2026 00:00:00 +0000

CVE-2026-48907 - Confirmed Exploitation

CVE-2026-48907

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-16 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-16

Asserted: 2026-06-16

Scope Notes: KEV entry: Widget Factory Joomla Content Editor Improper Access Control Vulnerability | Affected: Widget Factory / Joomla Content Editor | Description: Widget Facto…

Published on Tue, 16 Jun 2026 00:00:00 +0000

CVE-2026-20262 - Confirmed Exploitation

CVE-2026-20262

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-15 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-15

Asserted: 2026-06-15

Scope Notes: KEV entry: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | Affected: Cisco / Catalyst SD-WAN Manager | Description: Cisco Catalyst SD-WAN M…

Published on Mon, 15 Jun 2026 00:00:00 +0000

CVE-2026-54420 - Confirmed Exploitation

CVE-2026-54420

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-15 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-15

Asserted: 2026-06-15

Scope Notes: KEV entry: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | Affected: LiteSpeed / cPanel Plugin | Description: LiteSpeed cPanel plugin …

Published on Mon, 15 Jun 2026 00:00:00 +0000

CVE-2026-35273 - Confirmed Exploitation

CVE-2026-35273

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-12 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-12

Asserted: 2026-06-12

Scope Notes: KEV entry: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | Affected: Oracle / PeopleSoft Enterprise PeopleTool…

Published on Fri, 12 Jun 2026 00:00:00 +0000

CVE-2026-10520 - Confirmed Exploitation

CVE-2026-10520

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-11 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-11

Asserted: 2026-06-11

Scope Notes: KEV entry: Ivanti Sentry OS Command Injection Vulnerability | Affected: Ivanti / Sentry | Description: Ivanti Sentry (formerly known as MobileIron Sentry) contains a…

Published on Thu, 11 Jun 2026 00:00:00 +0000