CISA Known Exploited Vulnerabilities
KEV additions — July 2026
20 CVEs entered the KEV catalog in July 2026.
Added July 29, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-20316 | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 5.3 | 0.8 % | August 1, 2026 |
Added July 27, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 5.9 | 0.0 % | August 10, 2026 |
| CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 10 | 0.9 % | July 30, 2026 |
Added July 22, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-16232 | Check Point SmartConsole Improper Authentication Vulnerability | 9.1 | 1.1 % | July 25, 2026 |
| CVE-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 9.8 | 19.7 % | July 25, 2026 |
Added July 21, 20264
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-27137 | DD-WRT Stack-Based Buffer Overflow Vulnerability | 8.1 | 5.4 % | July 24, 2026 |
| CVE-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 9.8 | 11.9 % | July 24, 2026 |
| CVE-2026-60137 | WordPress Core SQL Injection Vulnerability | 5.9 | 4.0 % | August 4, 2026 |
| CVE-2026-63030 | WordPress Core Interpretation Conflict Vulnerability | 9.8 | 8.9 % | July 24, 2026 |
Added July 16, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection Vulnerability | 9.8 | 2.0 % | July 19, 2026 |
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection Vulnerability | 9.8 | 0.3 % | July 19, 2026 |
| CVE-2026-58644 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 9.8 | 1.3 % | July 19, 2026 |
Added July 14, 20264
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 10 | 1.4 % | July 17, 2026 |
| CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection Vulnerability | 7.2 | 1.6 % | July 17, 2026 |
| CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 7.8 | 0.4 % | July 28, 2026 |
| CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 5.3 | 7.0 % | July 17, 2026 |
Added July 10, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-56291 | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 9.8 | 0.3 % | July 13, 2026 |
Added July 7, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-48282 | Adobe ColdFusion Path Traversal Vulnerability | 10 | 1.0 % | July 10, 2026 |
| CVE-2026-48908 | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | — | 0.7 % | July 10, 2026 |
Added July 1, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 8.8 | 1.7 % | July 4, 2026 |