Catalog: KEVIntel
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-15 16:42 UTC
Evidence Sources: 1
First Seen: 2026-07-15
Asserted: 2026-07-15
Scope Notes: KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to …
Catalog: CISA
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-15 00:00 UTC
Evidence Sources: 1
First Seen: 2026-07-15
Asserted: 2026-07-15
Scope Notes: Oracle E-Business Suite Improper Privilege Management Vulnerability | Affected: Oracle / E-Business Suite | Description: Oracle…
Catalog: CISA
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-15 00:00 UTC
Evidence Sources: 1
First Seen: 2026-07-15
Asserted: 2026-07-15
Scope Notes: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | Affe…
Catalog: KEVIntel
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 19:00 UTC
Evidence Sources: 1
First Seen: 2026-07-14
Asserted: 2026-07-14
Scope Notes: Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in …
Catalog: KEVIntel
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 18:18 UTC
Evidence Sources: 1
First Seen: 2026-07-14
Asserted: 2026-07-14
Scope Notes: Sonicwall SMA1000 Appliance Work Place interface - Unauthenticated Server-side request forgery (SSRF) | Affected: Sonicwall…
Catalog: KEVIntel
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 07:00 UTC
Evidence Sources: 1
First Seen: 2026-07-14
Asserted: 2026-07-14
Scope Notes: Active Directory Federation Services Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1607, …
Catalog: KEVIntel
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 07:00 UTC
Evidence Sources: 1
First Seen: 2026-07-14
Asserted: 2026-07-14
Scope Notes: Microsoft SharePoint Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Se…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 0
Evidence Sources: 1
First Seen: 2024-11-19
Asserted: 2024-11-19
Scope Notes: Affected: Palo Alto Networks / PAN-OS | Class: firewall | Severity:…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-14
Asserted: 2023-10-14
Scope Notes: Affected: Oracle / Oracle Weblogic Server | Class: app-server | Se…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2024-12-19
Asserted: 2024-12-19
Scope Notes: Affected: Comodo / Comodo UTM Firewall | Class: firewall | Severi…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 88
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Netgear / NETGEAR R/D Series Routers | Class: router | S…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 0
Evidence Sources: 1
First Seen: 2024-06-07
Asserted: 2024-06-07
Scope Notes: Affected: PHP Foundation / PHP (PHP-CGI) | Class: web-app-framework…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Synacor / Zimbra Collaboration Suite | Class: email | Se…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 0
Evidence Sources: 1
First Seen: 2025-02-13
Asserted: 2025-02-13
Scope Notes: Affected: Palo Alto Networks / PAN-OS | Class: firewall | Severity:…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Microsoft / Exchange | Class: email | Severity: Critica…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 75
Evidence Sources: 1
First Seen: 2023-10-14
Asserted: 2023-10-14
Scope Notes: Affected: Wordpress / Wordpress Duplicator plugin | Class: cms | …
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 53
Evidence Sources: 1
First Seen: 2024-09-14
Asserted: 2024-09-14
Scope Notes: Affected: TVT/Provision-ISR / Multiple DVR models | Class: video-s…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Fortinet / FortiOS | Class: firewall | Severity: Critic…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 75
Evidence Sources: 1
First Seen: 2023-10-25
Asserted: 2023-10-25
Scope Notes: Affected: Citrix / Citrix ADC and Citrix Gateway | Class: app-deli…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-14 00:00 UTC
Characteristics: Severity: 53
Evidence Sources: 1
First Seen: 2025-05-15
Asserted: 2025-05-15
Scope Notes: Affected: Ivanti / Endpoint Manager Mobile (EPMM), formerly Mobile…