CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 4h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2026-72530

TrueConf Server Code Injection Vulnerability

TrueConf · Serverremediation: past CISA due date

P2added 2026-08-20due 2026-09-03

⋮

CVECVE-2026-64849

MLflow Server-Side Request Forgery Vulnerability

MLflow · MLflowremediation: past CISA due date

P2added 2026-08-19due 2026-09-02

⋮

CVECVE-2026-33824

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Microsoft · Internet Key Exchange (IKE) Service Extensionsremediation: past CISA due date

P2added 2026-08-18due 2026-08-21

⋮

CVECVE-2026-55040

Microsoft SharePoint Weak Authentication Vulnerability

Microsoft · SharePointremediation: past CISA due date

P2added 2026-08-18due 2026-08-21

⋮

CVECVE-2026-59310

Broadcom VMware vCenter Path Traversal Vulnerability

Broadcom · VMware vCenterremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-08-18due 2026-08-21

⋮

CVECVE-2026-65400

Apple macOS Improper Authentication Vulnerability

Apple · macOSremediation: past CISA due date

P2added 2026-08-18due 2026-08-21

⋮

CVECVE-2025-62593

Ray-Project Ray Code Injection Vulnerability

Ray-Project · Rayremediation: past CISA due date

P2added 2026-08-17due 2026-08-20

⋮

CVECVE-2026-20349

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) remediation: past CISA due date

P2added 2026-08-11due 2026-08-14

⋮

CVECVE-2026-68820

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Microsoft · Windows Ancillary Function Driver for WinSock remediation: past CISA due date

P2added 2026-08-11due 2026-08-25

⋮

CVECVE-2026-72898

Metabase SQL Injection Vulnerability

Metabase · Metabaseremediation: past CISA due date

P2added 2026-08-11due 2026-08-14

⋮

CVECVE-2026-8037

Progress LoadMaster Command Injection Vulnerability

Progress · LoadMasterremediation: past CISA due date

P2added 2026-08-07due 2026-08-10

⋮

CVECVE-2026-63077

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

JetBrains · TeamCityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-08-05due 2026-08-08

⋮

CVECVE-2026-18556

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able · N-centralremediation: past CISA due date

P2added 2026-08-04due 2026-08-07

⋮

CVECVE-2026-34486

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Apache · Tomcatremediation: past CISA due date

P2added 2026-08-04due 2026-08-07

⋮

CVECVE-2026-9198

IBM Langflow Code Injection Vulnerability

IBM · Langflowremediation: past CISA due date

P2added 2026-08-04due 2026-08-07

⋮

CVECVE-2026-18577

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able · N-centralremediation: past CISA due date

P2added 2026-08-03due 2026-08-06

⋮

CVECVE-2026-20316

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Cisco · Secure Firewall Management Center (FMC)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-07-29due 2026-08-01

⋮

CVECVE-2025-68686

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Fortinet · FortiOSremediation: past CISA due date

P2added 2026-07-27due 2026-08-10

⋮

CVECVE-2026-16812

Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Arista · VeloCloud Orchestratorremediation: past CISA due date

P2added 2026-07-27due 2026-07-30

⋮

CVECVE-2026-16232MENA

Check Point SmartConsole Improper Authentication Vulnerability

Check Point · SmartConsoleremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-27-checkpoint-weekly

P2added 2026-07-22due 2026-07-25

⋮

ViewLinked report

CVECVE-2026-50522MENA

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePointremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-27-checkpoint-weekly

P2added 2026-07-22due 2026-07-25

⋮

ViewLinked report

CVECVE-2021-27137

DD-WRT Stack-Based Buffer Overflow Vulnerability

DD-WRT · DD-WRTremediation: past CISA due date

P2added 2026-07-21due 2026-07-24

⋮

CVECVE-2026-0770

Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Langflow · Langflowremediation: past CISA due date

P2added 2026-07-21due 2026-07-24

⋮

CVECVE-2026-60137MENA

WordPress Core SQL Injection Vulnerability

WordPress · Coreremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly

P2added 2026-07-21due 2026-08-04

⋮

ViewLinked report

CVECVE-2026-63030MENA

WordPress Core Interpretation Conflict Vulnerability

WordPress · Coreremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly

P2added 2026-07-21due 2026-07-24

⋮

ViewLinked report

CVECVE-2026-25089

Fortinet FortiSandbox OS Command Injection Vulnerability

Fortinet · FortiSandboxremediation: past CISA due date

P2added 2026-07-16due 2026-07-19

⋮

CVECVE-2026-39808

Fortinet FortiSandbox OS Command Injection Vulnerability

Fortinet · FortiSandboxremediation: past CISA due date

P2added 2026-07-16due 2026-07-19

⋮

CVECVE-2026-58644MENA

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePointremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly

P2added 2026-07-16due 2026-07-19

⋮

ViewLinked report

CVECVE-2023-4346

KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

KNX Association · KNX Protocol Connection Authorization Option 1remediation: past CISA due date

P2added 2026-07-15due 2026-07-29

⋮

CVECVE-2026-46817

Oracle E-Business Suite Improper Privilege Management Vulnerability

Oracle · E-Business Suiteremediation: past CISA due date

P2added 2026-07-15due 2026-07-18

⋮

CVECVE-2026-15409MENA

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall · SMA1000 Appliancesremediation: known ransomware use · tied to a tracked MENA case · past CISA due date⬤ KNOWN RANSOMWARE USElinked case: 2026-07-14-sonicwall-sma1000

P1added 2026-07-14due 2026-07-17

⋮

ViewLinked report

CVECVE-2026-15410MENA

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall · SMA1000 Appliancesremediation: known ransomware use · tied to a tracked MENA case · past CISA due date⬤ KNOWN RANSOMWARE USElinked case: 2026-07-14-sonicwall-sma1000

P1added 2026-07-14due 2026-07-17

⋮

ViewLinked report

CVECVE-2026-56155MENA

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft · Active Directory Federation Servicesremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly

P2added 2026-07-14due 2026-07-28

⋮

ViewLinked report

CVECVE-2026-56164MENA

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Microsoft · SharePoint Serverremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly

P2added 2026-07-14due 2026-07-17

⋮

ViewLinked report

CVECVE-2008-4128

Cisco IOS Cross-Site Request Forgery Vulnerability

Cisco · IOSremediation: past CISA due date

P2added 2026-07-13due 2026-07-16

⋮

CVECVE-2026-48939

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

iCagenda · iCagendaremediation: past CISA due date

P2added 2026-07-10due 2026-07-13

⋮

CVECVE-2026-56291

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Balbooa · Formsremediation: past CISA due date

P2added 2026-07-10due 2026-07-13

⋮

CVECVE-2026-48282

Adobe ColdFusion Path Traversal Vulnerability

Adobe · ColdFusionremediation: past CISA due date

P2added 2026-07-07due 2026-07-10

⋮

CVECVE-2026-48908

JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

JoomShaper · SP Page Builderremediation: past CISA due date

P2added 2026-07-07due 2026-07-10

⋮

CVECVE-2026-55255

Langflow Authorization Bypass Through User-Controlled Key Vulnerability

Langflow · Langflowremediation: past CISA due date

P2added 2026-07-07due 2026-07-10

⋮

CVECVE-2026-56290

Joomlack Page Builder Improper Access Control Vulnerability

Joomlack · Page Builderremediation: past CISA due date

P2added 2026-07-07due 2026-07-10

⋮

CVECVE-2026-45659

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-07-01due 2026-07-04

⋮

CVECVE-2026-48558

SimpleHelp Authentication Bypass Vulnerability

SimpleHelp · SimpleHelpremediation: past CISA due date

P2added 2026-06-29due 2026-07-02

⋮

CVECVE-2026-12569

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

PTC · Windchill and FlexPLMremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-06-25due 2026-06-28

⋮

CVECVE-2026-20230

Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

Cisco · Unified Communications Managerremediation: past CISA due date

P2added 2026-06-25due 2026-06-28

⋮

CVECVE-2025-67038

Lantronix EDS5000 Code Injection Vulnerability

Lantronix · EDS5000remediation: past CISA due date

P2added 2026-06-23due 2026-06-26

⋮

CVECVE-2026-34908

Ubiquiti UniFi OS Improper Access Control Vulnerability

Ubiquiti · UniFi OSremediation: past CISA due date

P2added 2026-06-23due 2026-06-26

⋮

CVECVE-2026-34909

Ubiquiti UniFi OS Path Traversal Vulnerability

Ubiquiti · UniFi OSremediation: past CISA due date

P2added 2026-06-23due 2026-06-26

⋮

CVECVE-2026-34910

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti · UniFi OSremediation: past CISA due date

P2added 2026-06-23due 2026-06-26

⋮

CVECVE-2026-20253

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Splunk · Enterpriseremediation: past CISA due date

P2added 2026-06-18due 2026-06-21

⋮

51–100 of ~1,722

← Prev Next →