CISA - Known Exploited Vulnerabilities Catalog

Recent Items

CVE-2008-4128 - Confirmed Exploitation

<h3>CVE-2008-4128</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-13 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-13 Asserted: 2026-07-13 Scope Notes: Cisco IOS Cross-Site Request Forgery Vulnerability | Affected: Cisco / IOS | Description: Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that all…

Published on 2026-07-13T00:00:00+00:00

Updated on 2026-07-13T18:00:01.842612+00:00

CVE-2026-56291 - Confirmed Exploitation

<h3>CVE-2026-56291</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-10 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-10 Asserted: 2026-07-10 Scope Notes: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: Balbooa / Forms | Description: Balbooa Forms contains an unrestricted upload …

Published on 2026-07-10T00:00:00+00:00

Updated on 2026-07-10T18:00:02.597504+00:00

CVE-2026-48939 - Confirmed Exploitation

<h3>CVE-2026-48939</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-10 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-10 Asserted: 2026-07-10 Scope Notes: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: iCagenda / iCagenda | Description: iCagenda contains an unrestricted upload of fil…

Published on 2026-07-10T00:00:00+00:00

Updated on 2026-07-10T18:00:02.701206+00:00

CVE-2026-48282 - Confirmed Exploitation

<h3>CVE-2026-48282</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEV entry: Adobe ColdFusion Path Traversal Vulnerability | Affected: Adobe / ColdFusion | Description: Adobe ColdFusion contains a path traversal vulnerability that …

Published on 2026-07-07T00:00:00+00:00

Updated on 2026-07-07T20:00:02.626357+00:00

CVE-2026-48908 - Confirmed Exploitation

<h3>CVE-2026-48908</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEV entry: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: JoomShaper / SP Page Builder | Description: JoomShape…

Published on 2026-07-07T00:00:00+00:00

Updated on 2026-07-07T18:00:02.317978+00:00

CVE-2026-56290 - Confirmed Exploitation

<h3>CVE-2026-56290</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEV entry: Joomlack Page Builder Improper Access Control Vulnerability | Affected: Joomlack / Page Builder | Description: Joomlack Page Builder contains an improper …

Published on 2026-07-07T00:00:00+00:00

Updated on 2026-07-07T18:00:31.872519+00:00

CVE-2026-55255 - Confirmed Exploitation

<h3>CVE-2026-55255</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEV entry: Langflow Authorization Bypass Through User-Controlled Key Vulnerability | Affected: Langflow / Langflow | Description: Langflow contains an authorization …

Published on 2026-07-07T00:00:00+00:00

Updated on 2026-07-07T18:00:02.403515+00:00

CVE-2026-45659 - Confirmed Exploitation

<h3>CVE-2026-45659</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-01 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-01 Asserted: 2026-07-01 Scope Notes: KEV entry: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | Affected: Microsoft / SharePoint Server | Description: Microsoft SharePoint …

Published on 2026-07-01T00:00:00+00:00

Updated on 2026-07-01T20:00:01.616698+00:00

CVE-2026-48558 - Confirmed Exploitation

<h3>CVE-2026-48558</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-29 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-29 Asserted: 2026-06-29 Scope Notes: KEV entry: SimpleHelp Authentication Bypass Vulnerability | Affected: SimpleHelp / SimpleHelp | Description: SimpleHelp contains an authentication bypass vulnerabil…

Published on 2026-06-29T00:00:00+00:00

Updated on 2026-06-29T20:00:01.988851+00:00

CVE-2026-20230 - Confirmed Exploitation

<h3>CVE-2026-20230</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-25 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-25 Asserted: 2026-06-25 Scope Notes: KEV entry: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | Affected: Cisco / Unified Communications Manager | Description: Ci…

Published on 2026-06-25T00:00:00+00:00

Updated on 2026-06-25T20:00:02.000436+00:00

CVE-2026-12569 - Confirmed Exploitation

<h3>CVE-2026-12569</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-25 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-25 Asserted: 2026-06-25 Scope Notes: KEV entry: PTC Windchill and FlexPLM Improper Input Validation Vulnerability | Affected: PTC / Windchill and FlexPLM | Description: PTC Windchill and FlexPLM contain…

Published on 2026-06-25T00:00:00+00:00

Updated on 2026-06-25T20:00:01.914560+00:00

CVE-2026-34909 - Confirmed Exploitation

<h3>CVE-2026-34909</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEV entry: Ubiquiti UniFi OS Path Traversal Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains a path traversal vulnerability wh…

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T18:00:02.510704+00:00

CVE-2026-34908 - Confirmed Exploitation

<h3>CVE-2026-34908</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEV entry: Ubiquiti UniFi OS Improper Access Control Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains an improper access contr…

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T18:00:02.589393+00:00

CVE-2025-67038 - Confirmed Exploitation

<h3>CVE-2025-67038</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEV entry: Lantronix EDS5000 Code Injection Vulnerability | Affected: Lantronix / EDS5000 | Description: Lantronix EDS5000 contains a code injection vulnerability th…

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T18:00:02.348917+00:00

CVE-2026-34910 - Confirmed Exploitation

<h3>CVE-2026-34910</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEV entry: Ubiquiti UniFi OS Improper Input Validation Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains an improper input vali…

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T18:00:02.436128+00:00

CVE-2026-20253 - Confirmed Exploitation

<h3>CVE-2026-20253</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-18 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-18 Asserted: 2026-06-18 Scope Notes: KEV entry: Splunk Enterprise Missing Authentication for Critical Function Vulnerability | Affected: Splunk / Enterprise | Description: Splunk Enterprise contains a m…

Published on 2026-06-18T00:00:00+00:00

Updated on 2026-06-18T17:00:02.984706+00:00

CVE-2026-48907 - Confirmed Exploitation

<h3>CVE-2026-48907</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-16 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-16 Asserted: 2026-06-16 Scope Notes: KEV entry: Widget Factory Joomla Content Editor Improper Access Control Vulnerability | Affected: Widget Factory / Joomla Content Editor | Description: Widget Facto…

Published on 2026-06-16T00:00:00+00:00

Updated on 2026-06-16T20:00:01.385475+00:00

CVE-2026-20262 - Confirmed Exploitation

<h3>CVE-2026-20262</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-15 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-15 Asserted: 2026-06-15 Scope Notes: KEV entry: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | Affected: Cisco / Catalyst SD-WAN Manager | Description: Cisco Catalyst SD-WAN M…

Published on 2026-06-15T00:00:00+00:00

Updated on 2026-06-15T20:00:01.973135+00:00

CVE-2026-54420 - Confirmed Exploitation

<h3>CVE-2026-54420</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-15 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-15 Asserted: 2026-06-15 Scope Notes: KEV entry: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | Affected: LiteSpeed / cPanel Plugin | Description: LiteSpeed cPanel plugin …

Published on 2026-06-15T00:00:00+00:00

Updated on 2026-06-15T20:00:01.853106+00:00

CVE-2026-35273 - Confirmed Exploitation

<h3>CVE-2026-35273</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-12 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-12 Asserted: 2026-06-12 Scope Notes: KEV entry: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | Affected: Oracle / PeopleSoft Enterprise PeopleTool…

Published on 2026-06-12T00:00:00+00:00

Updated on 2026-06-12T18:00:01.906833+00:00