Visit Website →

Recent Items

CVE-2026-56164 - Confirmed Exploitation

CVE-2026-56164

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-14 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-14

Asserted: 2026-07-14

Scope Notes: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | Affected: Microsoft / SharePoint Server | Description: Microsoft SharePoint …

Published on Tue, 14 Jul 2026 00:00:00 +0000

CVE-2026-15409 - Confirmed Exploitation

CVE-2026-15409

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-14 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-14

Asserted: 2026-07-14

Scope Notes: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | Affected: SonicWall / SMA1000 Appliances | Description: SonicWall SMA1000 Appliances contain…

Published on Tue, 14 Jul 2026 00:00:00 +0000

CVE-2026-56155 - Confirmed Exploitation

CVE-2026-56155

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-14 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-14

Asserted: 2026-07-14

Scope Notes: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | Affected: Microsoft / Active Directory Federation Services…

Published on Tue, 14 Jul 2026 00:00:00 +0000

CVE-2026-15410 - Confirmed Exploitation

CVE-2026-15410

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-14 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-14

Asserted: 2026-07-14

Scope Notes: SonicWall SMA1000 Appliances Code Injection Vulnerability | Affected: SonicWall / SMA1000 Appliances | Description: SonicWall SMA1000 Appliances contain a code injec…

Published on Tue, 14 Jul 2026 00:00:00 +0000

CVE-2008-4128 - Confirmed Exploitation

CVE-2008-4128

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-13 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-13

Asserted: 2026-07-13

Scope Notes: Cisco IOS Cross-Site Request Forgery Vulnerability | Affected: Cisco / IOS | Description: Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that all…

Published on Mon, 13 Jul 2026 00:00:00 +0000

CVE-2026-56291 - Confirmed Exploitation

CVE-2026-56291

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-10 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-10

Asserted: 2026-07-10

Scope Notes: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: Balbooa / Forms | Description: Balbooa Forms contains an unrestricted upload …

Published on Fri, 10 Jul 2026 00:00:00 +0000

CVE-2026-48939 - Confirmed Exploitation

CVE-2026-48939

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-10 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-10

Asserted: 2026-07-10

Scope Notes: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: iCagenda / iCagenda | Description: iCagenda contains an unrestricted upload of fil…

Published on Fri, 10 Jul 2026 00:00:00 +0000

CVE-2026-48282 - Confirmed Exploitation

CVE-2026-48282

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEV entry: Adobe ColdFusion Path Traversal Vulnerability | Affected: Adobe / ColdFusion | Description: Adobe ColdFusion contains a path traversal vulnerability that …

Published on Tue, 07 Jul 2026 00:00:00 +0000

CVE-2026-56290 - Confirmed Exploitation

CVE-2026-56290

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEV entry: Joomlack Page Builder Improper Access Control Vulnerability | Affected: Joomlack / Page Builder | Description: Joomlack Page Builder contains an improper …

Published on Tue, 07 Jul 2026 00:00:00 +0000

CVE-2026-48908 - Confirmed Exploitation

CVE-2026-48908

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEV entry: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | Affected: JoomShaper / SP Page Builder | Description: JoomShape…

Published on Tue, 07 Jul 2026 00:00:00 +0000

CVE-2026-55255 - Confirmed Exploitation

CVE-2026-55255

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-07 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-07

Asserted: 2026-07-07

Scope Notes: KEV entry: Langflow Authorization Bypass Through User-Controlled Key Vulnerability | Affected: Langflow / Langflow | Description: Langflow contains an authorization …

Published on Tue, 07 Jul 2026 00:00:00 +0000

CVE-2026-45659 - Confirmed Exploitation

CVE-2026-45659

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-01 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-01

Asserted: 2026-07-01

Scope Notes: KEV entry: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | Affected: Microsoft / SharePoint Server | Description: Microsoft SharePoint …

Published on Wed, 01 Jul 2026 00:00:00 +0000

CVE-2026-48558 - Confirmed Exploitation

CVE-2026-48558

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-29 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-29

Asserted: 2026-06-29

Scope Notes: KEV entry: SimpleHelp Authentication Bypass Vulnerability | Affected: SimpleHelp / SimpleHelp | Description: SimpleHelp contains an authentication bypass vulnerabil…

Published on Mon, 29 Jun 2026 00:00:00 +0000

CVE-2026-12569 - Confirmed Exploitation

CVE-2026-12569

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-25 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-25

Asserted: 2026-06-25

Scope Notes: KEV entry: PTC Windchill and FlexPLM Improper Input Validation Vulnerability | Affected: PTC / Windchill and FlexPLM | Description: PTC Windchill and FlexPLM contain…

Published on Thu, 25 Jun 2026 00:00:00 +0000

CVE-2026-20230 - Confirmed Exploitation

CVE-2026-20230

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-25 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-25

Asserted: 2026-06-25

Scope Notes: KEV entry: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | Affected: Cisco / Unified Communications Manager | Description: Ci…

Published on Thu, 25 Jun 2026 00:00:00 +0000

CVE-2026-34909 - Confirmed Exploitation

CVE-2026-34909

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-23 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-23

Asserted: 2026-06-23

Scope Notes: KEV entry: Ubiquiti UniFi OS Path Traversal Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains a path traversal vulnerability wh…

Published on Tue, 23 Jun 2026 00:00:00 +0000

CVE-2026-34910 - Confirmed Exploitation

CVE-2026-34910

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-23 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-23

Asserted: 2026-06-23

Scope Notes: KEV entry: Ubiquiti UniFi OS Improper Input Validation Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains an improper input vali…

Published on Tue, 23 Jun 2026 00:00:00 +0000

CVE-2026-34908 - Confirmed Exploitation

CVE-2026-34908

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-23 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-23

Asserted: 2026-06-23

Scope Notes: KEV entry: Ubiquiti UniFi OS Improper Access Control Vulnerability | Affected: Ubiquiti / UniFi OS | Description: Ubiquiti UniFi OS contains an improper access contr…

Published on Tue, 23 Jun 2026 00:00:00 +0000

CVE-2025-67038 - Confirmed Exploitation

CVE-2025-67038

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-23 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-23

Asserted: 2026-06-23

Scope Notes: KEV entry: Lantronix EDS5000 Code Injection Vulnerability | Affected: Lantronix / EDS5000 | Description: Lantronix EDS5000 contains a code injection vulnerability th…

Published on Tue, 23 Jun 2026 00:00:00 +0000

CVE-2026-20253 - Confirmed Exploitation

CVE-2026-20253

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-18 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-18

Asserted: 2026-06-18

Scope Notes: KEV entry: Splunk Enterprise Missing Authentication for Critical Function Vulnerability | Affected: Splunk / Enterprise | Description: Splunk Enterprise contains a m…

Published on Thu, 18 Jun 2026 00:00:00 +0000