CyberSecBulletin

Vulnerabilities exploited in the wild

1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.

ScoreVulnerabilityAddedFederal deadlineRansomware use
9.8 Critical severityJetBrains TeamCity Deserialization of Untrusted Data
CVE-2026-63077
Aug 5, 2026Aug 8, 2026Known
9.8 Critical severityIBM Langflow Code Injection
CVE-2026-9198
Aug 4, 2026Aug 7, 2026Not reported
7.5 High severityApache Tomcat Missing Encryption of Sensitive Data
CVE-2026-34486
Aug 4, 2026Aug 7, 2026Not reported
7.4 High severityN-able N-central Authentication Bypass Using an Alternate Path or Channel
CVE-2026-18556
Aug 4, 2026Aug 7, 2026Not reported
8.1 High severityN-able N-central Authentication Bypass Using an Alternate Path or Channel
CVE-2026-18577
Aug 3, 2026Aug 6, 2026Not reported
5.3 Medium severityCisco Secure Firewall Management Center Use of Hard-coded Password
CVE-2026-20316
Jul 29, 2026Aug 1, 2026Known
10.0 Critical severityArista VeloCloud Orchestrator On-Prem OS Command Injection
CVE-2026-16812
Jul 27, 2026Jul 30, 2026Not reported
5.9 Medium severityFortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor
CVE-2025-68686
Jul 27, 2026Aug 10, 2026Not reported
9.8 Critical severityMicrosoft SharePoint Deserialization of Untrusted Data
CVE-2026-50522
Jul 22, 2026Jul 25, 2026Not reported
9.8 Critical severityCheck Point SmartConsole Improper Authentication
CVE-2026-16232
Jul 22, 2026Jul 25, 2026Not reported
9.8 Critical severityWordPress Core Interpretation Conflict
CVE-2026-63030
Jul 21, 2026Jul 24, 2026Not reported
5.9 Medium severityWordPress Core SQL Injection
CVE-2026-60137
Jul 21, 2026Aug 4, 2026Not reported
9.8 Critical severityLangflow Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-0770
Jul 21, 2026Jul 24, 2026Not reported
8.1 High severityDD-WRT Stack-Based Buffer Overflow
CVE-2021-27137
Jul 21, 2026Jul 24, 2026Not reported
9.8 Critical severityMicrosoft SharePoint Deserialization of Untrusted Data
CVE-2026-58644
Jul 16, 2026Jul 19, 2026Not reported
9.8 Critical severityFortinet FortiSandbox OS Command Injection
CVE-2026-39808
Jul 16, 2026Jul 19, 2026Not reported
9.8 Critical severityFortinet FortiSandbox OS Command Injection
CVE-2026-25089
Jul 16, 2026Jul 19, 2026Not reported
9.8 Critical severityOracle E-Business Suite Improper Privilege Management
CVE-2026-46817
Jul 15, 2026Jul 18, 2026Not reported
7.5 High severityKNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism
CVE-2023-4346
Jul 15, 2026Jul 29, 2026Not reported
9.8 Critical severityMicrosoft SharePoint Server Missing Authentication for Critical Function
CVE-2026-56164
Jul 14, 2026Jul 17, 2026Not reported
7.8 High severityMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control
CVE-2026-56155
Jul 14, 2026Jul 28, 2026Not reported
7.2 High severitySonicWall SMA1000 Appliances Code Injection
CVE-2026-15410
Jul 14, 2026Jul 17, 2026Known
10.0 Critical severitySonicWall SMA1000 Appliances Server-Side Request Forgery
CVE-2026-15409
Jul 14, 2026Jul 17, 2026Known
9.3 High severityCisco IOS Cross-Site Request Forgery
CVE-2008-4128
Jul 13, 2026Jul 16, 2026Not reported
9.8 Critical severityBalbooa Forms Unrestricted Upload of File with Dangerous Type
CVE-2026-56291
Jul 10, 2026Jul 13, 2026Not reported
9.8 Critical severityiCagenda Unrestricted Upload of File with Dangerous Type
CVE-2026-48939
Jul 10, 2026Jul 13, 2026Not reported
9.8 Critical severityJoomlack Page Builder Improper Access Control
CVE-2026-56290
Jul 7, 2026Jul 10, 2026Not reported
8.4 High severityLangflow Authorization Bypass Through User-Controlled Key
CVE-2026-55255
Jul 7, 2026Jul 10, 2026Not reported
9.8 Critical severityJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type
CVE-2026-48908
Jul 7, 2026Jul 10, 2026Not reported
10.0 Critical severityAdobe ColdFusion Path Traversal
CVE-2026-48282
Jul 7, 2026Jul 10, 2026Not reported
8.8 High severityMicrosoft SharePoint Server Deserialization of Untrusted Data
CVE-2026-45659
Jul 1, 2026Jul 4, 2026Known
10.0 Critical severitySimpleHelp Authentication Bypass
CVE-2026-48558
Jun 29, 2026Jul 2, 2026Not reported
8.6 High severityCisco Unified Communications Manager Server-Side Request Forgery (SSRF)
CVE-2026-20230
Jun 25, 2026Jun 28, 2026Not reported
9.8 Critical severityPTC Windchill and FlexPLM Improper Input Validation
CVE-2026-12569
Jun 25, 2026Jun 28, 2026Known
10.0 Critical severityUbiquiti UniFi OS Improper Input Validation
CVE-2026-34910
Jun 23, 2026Jun 26, 2026Not reported
10.0 Critical severityUbiquiti UniFi OS Path Traversal
CVE-2026-34909
Jun 23, 2026Jun 26, 2026Not reported
10.0 Critical severityUbiquiti UniFi OS Improper Access Control
CVE-2026-34908
Jun 23, 2026Jun 26, 2026Not reported
9.8 Critical severityLantronix EDS5000 Code Injection
CVE-2025-67038
Jun 23, 2026Jun 26, 2026Not reported
9.8 Critical severitySplunk Enterprise Missing Authentication for Critical Function
CVE-2026-20253
Jun 18, 2026Jun 21, 2026Not reported
9.8 Critical severityWidget Factory Joomla Content Editor Improper Access Control
CVE-2026-48907
Jun 16, 2026Jun 19, 2026Not reported

About this list

CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.

A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.