CISA Known Exploited Vulnerabilities
KEV additions — July 2026
20 CVEs entered the KEV catalog in July 2026.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added July 29, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-20316 | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 5.3 | 35.1 % | Aug 1, 2026 |
Added July 27, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 5.9 | 29.5 % | Aug 10, 2026 |
| CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 10 | 1.0 % | Jul 30, 2026 |
Added July 22, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-16232 | Check Point SmartConsole Improper Authentication Vulnerability | 9.1 | 78.0 % | Jul 25, 2026 |
| CVE-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 9.8 | 3.0 % | Jul 25, 2026 |
Added July 21, 20264
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-27137 | DD-WRT Stack-Based Buffer Overflow Vulnerability | 8.1 | 4.0 % | Jul 24, 2026 |
| CVE-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 9.8 | 62.6 % | Jul 24, 2026 |
| CVE-2026-60137 | WordPress Core SQL Injection Vulnerability | 5.9 | 5.3 % | Aug 4, 2026 |
| CVE-2026-63030 | WordPress Core Interpretation Conflict Vulnerability | 9.8 | 10.6 % | Jul 24, 2026 |
Added July 16, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection Vulnerability | 9.8 | 76.1 % | Jul 19, 2026 |
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection Vulnerability | 9.8 | 47.4 % | Jul 19, 2026 |
| CVE-2026-58644 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 9.8 | 15.9 % | Jul 19, 2026 |
Added July 14, 20264
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 10 | 6.8 % | Jul 17, 2026 |
| CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection Vulnerability | 7.2 | 11.8 % | Jul 17, 2026 |
| CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 7.8 | 0.3 % | Jul 28, 2026 |
| CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 5.3 | 1.0 % | Jul 17, 2026 |
Added July 10, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-56291 | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 9.8 | 14.9 % | Jul 13, 2026 |
Added July 7, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-48282 | Adobe ColdFusion Path Traversal Vulnerability | 10 | 42.4 % | Jul 10, 2026 |
| CVE-2026-48908 | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | — | 88.5 % | Jul 10, 2026 |
Added July 1, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 8.8 | 2.7 % | Jul 4, 2026 |