<h3>CVE-2023-4346</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-15 16:42 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-15</p> <p><strong>Asserted:</strong> 2026-07-15</p> <p><strong>Scope Notes:</strong> KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users... | Affected: KNX …

<h3>CVE-2026-15410</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-14 19:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-14</p> <p><strong>Asserted:</strong> 2026-07-14</p> <p><strong>Scope Notes:</strong> Post-authentication improper control of generation of code (&#39;Code Injection&#39;) vulnerability has been identified in the SMA1000 Appliance Management... | Affe…

<h3>CVE-2026-15409</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-14 18:18 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-14</p> <p><strong>Asserted:</strong> 2026-07-14</p> <p><strong>Scope Notes:</strong> Sonicwall SMA1000 Appliance Work Place interface - Unauthenticated Server-side request forgery (SSRF) | Affected: Sonicwall / SMA1000 | CVSS: 10.0 (CRITICAL) | Used …

<h3>CVE-2026-56164</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-14 07:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-14</p> <p><strong>Asserted:</strong> 2026-07-14</p> <p><strong>Scope Notes:</strong> Microsoft SharePoint Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 201…

<h3>CVE-2026-56155</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-14 07:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-14</p> <p><strong>Asserted:</strong> 2026-07-14</p> <p><strong>Scope Notes:</strong> Active Directory Federation Services Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1607, Windows 10 Version 1809, Windows Server 20…

<h3>CVE-2008-4128</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-13 17:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-13</p> <p><strong>Asserted:</strong> 2026-07-13</p> <p><strong>Scope Notes:</strong> Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services... | Affected: Cisco …

<h3>CVE-2024-29972</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-13 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-13</p> <p><strong>Asserted:</strong> 2026-07-13</p> <p><strong>Scope Notes:</strong> ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program &#34;remote_help-cgi&#34; in Zyxel NAS326 firmware versions before... | Affect…

<h3>CVE-2026-48939</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-10 17:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-10</p> <p><strong>Asserted:</strong> 2026-07-10</p> <p><strong>Scope Notes:</strong> Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla &lt; 4.0.8/3.9.15 | Affected: icagenda.com / iCagenda extension for Joomla |…

<h3>CVE-2026-56291</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-10 17:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-10</p> <p><strong>Asserted:</strong> 2026-07-10</p> <p><strong>Scope Notes:</strong> Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension &lt; 2.4.1 | Affected: balbooa.com / balbooa.com Balbooa Forms extension for …

<h3>CVE-2026-2699</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-10 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-10</p> <p><strong>Asserted:</strong> 2026-07-10</p> <p><strong>Scope Notes:</strong> EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC) | Affected: Progress / ShareFile Storage Zones Controller | CVSS: 9.8 (CRITICAL) | EPSS: 0.4942…

<h3>CVE-2026-1207</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-09 16:15 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-09</p> <p><strong>Asserted:</strong> 2026-07-09</p> <p><strong>Scope Notes:</strong> Potential SQL injection via raster lookups on PostGIS | Affected: djangoproject / Django | CVSS: 5.4 (MEDIUM) | EPSS: 0.09436 | Used in malware: unknown | Not yet in …

<h3>CVE-2023-39361</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-08 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-08</p> <p><strong>Asserted:</strong> 2026-07-08</p> <p><strong>Scope Notes:</strong> Unauthenticated SQL Injection in graph_view.php in Cacti | Affected: Cacti / cacti | CVSS: 9.8 (CRITICAL) | EPSS: 0.87575 | Used in malware: unknown | Not yet in CIS…

<h3>CVE-2026-4631</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-08 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-08</p> <p><strong>Asserted:</strong> 2026-07-08</p> <p><strong>Scope Notes:</strong> Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection | Affected: Red Hat / Red Hat Enterprise Linux 10, Red Hat Enterpri…

<h3>CVE-2026-56290</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-07 17:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-07</p> <p><strong>Asserted:</strong> 2026-07-07</p> <p><strong>Scope Notes:</strong> KEVIntel entry: Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension &lt; 3.6.0 | Affected: joomlack.fr / JoomlaCK.fr Page Build…

<h3>CVE-2026-48908</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-07 17:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-07</p> <p><strong>Asserted:</strong> 2026-07-07</p> <p><strong>Scope Notes:</strong> KEVIntel entry: Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla &lt; 6.6.2 | Affected: joomshaper.net / SP Page Buil…

<h3>CVE-2026-55255</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-07 17:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-07</p> <p><strong>Asserted:</strong> 2026-07-07</p> <p><strong>Scope Notes:</strong> KEVIntel entry: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User&#39;s Flow | Affected: langflow-ai…

<h3>CVE-2026-48282</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-02 18:20 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-02</p> <p><strong>Asserted:</strong> 2026-07-02</p> <p><strong>Scope Notes:</strong> KEVIntel entry: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) (CWE-22) | Affected: Adobe / ColdFusion | CVSS: 1…

<h3>CVE-2026-8451</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-01 21:50 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-01</p> <p><strong>Asserted:</strong> 2026-07-01</p> <p><strong>Scope Notes:</strong> KEVIntel entry: Insufficient input validation leading to memory overread | Affected: NetScaler / ADC, Gateway | CVSS: 8.8 (HIGH) | EPSS: 0.00502 | Used in malware: un…

<h3>CVE-2026-45659</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-01 19:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-01</p> <p><strong>Asserted:</strong> 2026-07-01</p> <p><strong>Scope Notes:</strong> KEVIntel entry: Microsoft SharePoint Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Se…

<h3>CVE-2026-8037</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-01 14:51 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-01</p> <p><strong>Asserted:</strong> 2026-07-01</p> <p><strong>Scope Notes:</strong> KEVIntel entry: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager &amp; MOVEit …