Visit Website →

Recent Items

CVE-2024-36420 - Confirmed Exploitation

CVE-2024-36420

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-17 08:33 UTC

Evidence Sources: 1

First Seen: 2026-07-17

Asserted: 2026-07-17

Scope Notes: GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file | Affected: FlowiseAI / Flowise | CVSS: 7.5 (HIGH) | EPSS: 0.01776 | Used in malware: unknown…

Published on Fri, 17 Jul 2026 08:33:53 +0000

CVE-2026-46442 - Confirmed Exploitation

CVE-2026-46442

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-17 07:51 UTC

Evidence Sources: 1

First Seen: 2026-07-17

Asserted: 2026-07-17

Scope Notes: Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape | Affected: FlowiseAI / Flowise | CVSS: 9.4 (CRITICAL) | EPSS: 0.0082…

Published on Fri, 17 Jul 2026 07:51:05 +0000

CVE-2026-25089 - Confirmed Exploitation

CVE-2026-25089

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-16 17:00 UTC

Evidence Sources: 1

First Seen: 2026-07-16

Asserted: 2026-07-16

Scope Notes: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through... | Affect…

Published on Thu, 16 Jul 2026 17:00:15 +0000

CVE-2023-4346 - Confirmed Exploitation

CVE-2023-4346

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-15 16:42 UTC

Evidence Sources: 1

First Seen: 2026-07-15

Asserted: 2026-07-15

Scope Notes: KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users... | Affected: KNX …

Published on Wed, 15 Jul 2026 16:42:14 +0000

CVE-2026-15410 - Confirmed Exploitation

CVE-2026-15410

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-14 19:00 UTC

Evidence Sources: 1

First Seen: 2026-07-14

Asserted: 2026-07-14

Scope Notes: Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management... | Affe…

Published on Tue, 14 Jul 2026 19:00:56 +0000

CVE-2026-15409 - Confirmed Exploitation

CVE-2026-15409

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-14 18:18 UTC

Evidence Sources: 1

First Seen: 2026-07-14

Asserted: 2026-07-14

Scope Notes: Sonicwall SMA1000 Appliance Work Place interface - Unauthenticated Server-side request forgery (SSRF) | Affected: Sonicwall / SMA1000 | CVSS: 10.0 (CRITICAL) | Used …

Published on Tue, 14 Jul 2026 18:18:00 +0000

CVE-2026-56164 - Confirmed Exploitation

CVE-2026-56164

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-14 07:00 UTC

Evidence Sources: 1

First Seen: 2026-07-14

Asserted: 2026-07-14

Scope Notes: Microsoft SharePoint Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 201…

Published on Tue, 14 Jul 2026 07:00:00 +0000

CVE-2026-56155 - Confirmed Exploitation

CVE-2026-56155

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-14 07:00 UTC

Evidence Sources: 1

First Seen: 2026-07-14

Asserted: 2026-07-14

Scope Notes: Active Directory Federation Services Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows Server 20…

Published on Tue, 14 Jul 2026 07:00:00 +0000

CVE-2008-4128 - Confirmed Exploitation

CVE-2008-4128

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-13 17:00 UTC

Evidence Sources: 1

First Seen: 2026-07-13

Asserted: 2026-07-13

Scope Notes: Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services... | Affected: Cisco …

Published on Mon, 13 Jul 2026 17:00:17 +0000

CVE-2024-29972 - Confirmed Exploitation

CVE-2024-29972

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-13 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-13

Asserted: 2026-07-13

Scope Notes: ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before... | Affect…

Published on Mon, 13 Jul 2026 00:00:00 +0000

CVE-2026-48939 - Confirmed Exploitation

CVE-2026-48939

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-10 17:00 UTC

Evidence Sources: 1

First Seen: 2026-07-10

Asserted: 2026-07-10

Scope Notes: Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15 | Affected: icagenda.com / iCagenda extension for Joomla |…

Published on Fri, 10 Jul 2026 17:00:25 +0000

CVE-2026-56291 - Confirmed Exploitation

CVE-2026-56291

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-10 17:00 UTC

Evidence Sources: 1

First Seen: 2026-07-10

Asserted: 2026-07-10

Scope Notes: Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 | Affected: balbooa.com / balbooa.com Balbooa Forms extension for …

Published on Fri, 10 Jul 2026 17:00:25 +0000

CVE-2026-2699 - Confirmed Exploitation

CVE-2026-2699

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-10 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-10

Asserted: 2026-07-10

Scope Notes: EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC) | Affected: Progress / ShareFile Storage Zones Controller | CVSS: 9.8 (CRITICAL) | EPSS: 0.4942…

Published on Fri, 10 Jul 2026 00:00:00 +0000

CVE-2026-1207 - Confirmed Exploitation

CVE-2026-1207

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-09 16:15 UTC

Evidence Sources: 1

First Seen: 2026-07-09

Asserted: 2026-07-09

Scope Notes: Potential SQL injection via raster lookups on PostGIS | Affected: djangoproject / Django | CVSS: 5.4 (MEDIUM) | EPSS: 0.09436 | Used in malware: unknown | Not yet in …

Published on Thu, 09 Jul 2026 16:15:55 +0000

CVE-2026-4631 - Confirmed Exploitation

CVE-2026-4631

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-08 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-08

Asserted: 2026-07-08

Scope Notes: Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection | Affected: Red Hat / Red Hat Enterprise Linux 10, Red Hat Enterpri…

Published on Wed, 08 Jul 2026 00:00:00 +0000

CVE-2023-39361 - Confirmed Exploitation

CVE-2023-39361

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-08 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-08

Asserted: 2026-07-08

Scope Notes: Unauthenticated SQL Injection in graph_view.php in Cacti | Affected: Cacti / cacti | CVSS: 9.8 (CRITICAL) | EPSS: 0.87575 | Used in malware: unknown | Not yet in CIS…

Published on Wed, 08 Jul 2026 00:00:00 +0000

CVE-2026-56290 - Confirmed Exploitation

CVE-2026-56290

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 17:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEVIntel entry: Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 | Affected: joomlack.fr / JoomlaCK.fr Page Build…

Published on Tue, 07 Jul 2026 17:00:54 +0000

CVE-2026-48908 - Confirmed Exploitation

CVE-2026-48908

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 17:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEVIntel entry: Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 | Affected: joomshaper.net / SP Page Buil…

Published on Tue, 07 Jul 2026 17:00:54 +0000

CVE-2026-55255 - Confirmed Exploitation

CVE-2026-55255

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 17:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEVIntel entry: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow | Affected: langflow-ai…

Published on Tue, 07 Jul 2026 17:00:54 +0000

CVE-2026-48282 - Confirmed Exploitation

CVE-2026-48282

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-02 18:20 UTC

Evidence Sources: 1

First Seen: 2026-07-02

Asserted: 2026-07-02

Scope Notes: KEVIntel entry: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Affected: Adobe / ColdFusion | CVSS: 1…

Published on Thu, 02 Jul 2026 18:20:12 +0000