CISA KEV Additions | East Bay Cyberhttps://eastbaycyber.com/kev-dashboard/Newly listed CISA Known Exploited Vulnerabilities, with links to explainers.Tue, 08 Sep 2026 19:16:04 GMTCVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-75650CVE-2026-75650Tue, 08 Sep 2026 00:00:00 GMTAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (Adobe Commerce and Magento) Added to CISA KEV 2026-09-08.CVE-2026-81963: Microsoft Windows Link Following Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-81963CVE-2026-81963Tue, 08 Sep 2026 00:00:00 GMTMicrosoft Windows Link Following Vulnerability (Microsoft Windows) Added to CISA KEV 2026-09-08.CVE-2026-86218: N-able N-central Static Code Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-86218CVE-2026-86218Tue, 08 Sep 2026 00:00:00 GMTN-able N-central Static Code Injection Vulnerability (N-able N-central) Added to CISA KEV 2026-09-08.CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-85880CVE-2026-85880Tue, 08 Sep 2026 00:00:00 GMTMicrosoft Windows Heap-Based Buffer Overflow Vulnerability (Microsoft Windows) Added to CISA KEV 2026-09-08.CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-85046CVE-2026-85046Fri, 04 Sep 2026 00:00:00 GMTGoogle Chromium V8 Type Confusion Vulnerability (Google Chromium V8) Added to CISA KEV 2026-09-04.CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-59822CVE-2026-59822Wed, 02 Sep 2026 00:00:00 GMTBerriAI LiteLLM Improper Authentication Vulnerability (BerriAI LiteLLM) Added to CISA KEV 2026-09-02.CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-48710CVE-2026-48710Wed, 02 Sep 2026 00:00:00 GMTKludex Starlette HTTP Request/Response Smuggling Vulnerability (Kludex Starlette) Added to CISA KEV 2026-09-02.CVE-2026-49869: Kestra OSS OS Command Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-49869CVE-2026-49869Wed, 02 Sep 2026 00:00:00 GMTKestra OSS OS Command Injection Vulnerability (Kestra Kestra OSS) Added to CISA KEV 2026-09-02.CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-82329CVE-2026-82329Wed, 02 Sep 2026 00:00:00 GMTJFrog Artifactory Improper Authentication Vulnerability (JFrog Artifactory) Added to CISA KEV 2026-09-02.CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-9586CVE-2026-9586Wed, 02 Sep 2026 00:00:00 GMTSangoma Switchvox SQL Injection Vulnerability (Sangoma Switchvox) Added to CISA KEV 2026-09-02.CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-83548CVE-2026-83548Wed, 02 Sep 2026 00:00:00 GMTSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (SonicWall SMA1000 Appliances) Added to CISA KEV 2026-09-02.CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-83549CVE-2026-83549Wed, 02 Sep 2026 00:00:00 GMTSonicWall SMA1000 Appliances OS Command Injection Vulnerability (SonicWall SMA1000 Appliances) Added to CISA KEV 2026-09-02.CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-82078CVE-2026-82078Mon, 31 Aug 2026 00:00:00 GMTPaperCut NG/MF Unsafe Reflection Vulnerability (PaperCut NG/MF) Added to CISA KEV 2026-08-31.CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-81578CVE-2026-81578Mon, 31 Aug 2026 00:00:00 GMTPaperCut NG/MF Missing Authentication for Critical Function Vulnerability (PaperCut NG/MF) Added to CISA KEV 2026-08-31.CVE-2023-49105: ownCloud Improper Authentication Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2023-49105CVE-2023-49105Thu, 27 Aug 2026 00:00:00 GMTownCloud Improper Authentication Vulnerability (ownCloud ownCloud) Added to CISA KEV 2026-08-27.CVE-2026-53362: Linux Kernel Unspecified Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-53362CVE-2026-53362Thu, 27 Aug 2026 00:00:00 GMTLinux Kernel Unspecified Vulnerability (Linux Kernel) Added to CISA KEV 2026-08-27.CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-66384CVE-2026-66384Thu, 27 Aug 2026 00:00:00 GMTJFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability (JFrog Artifactory) Added to CISA KEV 2026-08-27.CVE-2021-23758: Ajax.NET Professional Deserialization of Untrusted Data Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2021-23758CVE-2021-23758Wed, 26 Aug 2026 00:00:00 GMTAjax.NET Professional Deserialization of Untrusted Data Vulnerability (Ajax.NET Professional Ajax.NET Professional) Added to CISA KEV 2026-08-26.CVE-2015-3246: Red Hat Libuser Race Condition Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2015-3246CVE-2015-3246Wed, 26 Aug 2026 00:00:00 GMTRed Hat Libuser Race Condition Vulnerability (Red Hat Libuser) Added to CISA KEV 2026-08-26.CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2015-5287CVE-2015-5287Wed, 26 Aug 2026 00:00:00 GMTRed Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability (Red Hat Automatic Bug Reporting Tool) Added to CISA KEV 2026-08-26.CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2022-0995CVE-2022-0995Wed, 26 Aug 2026 00:00:00 GMTLinux Kernel Out-of-Bounds Write Vulnerability (Linux Kernel) Added to CISA KEV 2026-08-26.CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-8452CVE-2026-8452Wed, 26 Aug 2026 00:00:00 GMTCitrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (Citrix NetScaler ADC and NetScaler Gateway) Added to CISA KEV 2026-08-26.CVE-2019-1068: Microsoft SQL Server Remote Code Execution Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2019-1068CVE-2019-1068Wed, 26 Aug 2026 00:00:00 GMTMicrosoft SQL Server Remote Code Execution Vulnerability (Microsoft SQL Server) Added to CISA KEV 2026-08-26.CVE-2026-60004: Gitea Code Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-60004CVE-2026-60004Tue, 25 Aug 2026 00:00:00 GMTGitea Code Injection Vulnerability (Gitea Gitea) Added to CISA KEV 2026-08-25.CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-21962CVE-2026-21962Mon, 24 Aug 2026 00:00:00 GMTOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in) Added to CISA KEV 2026-08-24.CVE-2026-73570: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-73570CVE-2026-73570Fri, 21 Aug 2026 00:00:00 GMTZimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (Synacor Zimbra Collaboration Suite (ZCS)) Added to CISA KEV 2026-08-21.CVE-2026-72530: TrueConf Server Code Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-72530CVE-2026-72530Thu, 20 Aug 2026 00:00:00 GMTTrueConf Server Code Injection Vulnerability (TrueConf Server) Added to CISA KEV 2026-08-20.CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-72529CVE-2026-72529Thu, 20 Aug 2026 00:00:00 GMTTrueConf Server Missing Authentication for Critical Function Vulnerability (TrueConf Server) Added to CISA KEV 2026-08-20.CVE-2026-64849: MLflow Server-Side Request Forgery Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-64849CVE-2026-64849Wed, 19 Aug 2026 00:00:00 GMTMLflow Server-Side Request Forgery Vulnerability (MLflow MLflow) Added to CISA KEV 2026-08-19.CVE-2026-33824: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-33824CVE-2026-33824Tue, 18 Aug 2026 00:00:00 GMTMicrosoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (Microsoft Internet Key Exchange (IKE) Service Extensions) Added to CISA KEV 2026-08-18.CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-59310CVE-2026-59310Tue, 18 Aug 2026 00:00:00 GMTBroadcom VMware vCenter Path Traversal Vulnerability (Broadcom VMware vCenter) Added to CISA KEV 2026-08-18.CVE-2026-55040: Microsoft SharePoint Weak Authentication Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-55040CVE-2026-55040Tue, 18 Aug 2026 00:00:00 GMTMicrosoft SharePoint Weak Authentication Vulnerability (Microsoft SharePoint) Added to CISA KEV 2026-08-18.CVE-2026-65400: Apple macOS Improper Authentication Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-65400CVE-2026-65400Tue, 18 Aug 2026 00:00:00 GMTApple macOS Improper Authentication Vulnerability (Apple macOS) Added to CISA KEV 2026-08-18.CVE-2025-62593: Ray-Project Ray Code Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2025-62593CVE-2025-62593Mon, 17 Aug 2026 00:00:00 GMTRay-Project Ray Code Injection Vulnerability (Ray-Project Ray) Added to CISA KEV 2026-08-17.CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-20349CVE-2026-20349Tue, 11 Aug 2026 00:00:00 GMTCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ) Added to CISA KEV 2026-08-11.CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-68820CVE-2026-68820Tue, 11 Aug 2026 00:00:00 GMTMicrosoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (Microsoft Windows Ancillary Function Driver for WinSock ) Added to CISA KEV 2026-08-11.CVE-2026-72898: Metabase SQL Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-72898CVE-2026-72898Tue, 11 Aug 2026 00:00:00 GMTMetabase SQL Injection Vulnerability (Metabase Metabase) Added to CISA KEV 2026-08-11.CVE-2026-8037: Progress LoadMaster Command Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-8037CVE-2026-8037Fri, 07 Aug 2026 00:00:00 GMTProgress LoadMaster Command Injection Vulnerability (Progress LoadMaster) Added to CISA KEV 2026-08-07.CVE-2026-63077: JetBrains TeamCity Deserialization of Untrusted Data Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-63077CVE-2026-63077Wed, 05 Aug 2026 00:00:00 GMTJetBrains TeamCity Deserialization of Untrusted Data Vulnerability (JetBrains TeamCity) Added to CISA KEV 2026-08-05.CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-18556CVE-2026-18556Tue, 04 Aug 2026 00:00:00 GMTN-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (N-able N-central) Added to CISA KEV 2026-08-04.CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-34486CVE-2026-34486Tue, 04 Aug 2026 00:00:00 GMTApache Tomcat Missing Encryption of Sensitive Data Vulnerability (Apache Tomcat) Added to CISA KEV 2026-08-04.CVE-2026-9198: IBM Langflow Code Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-9198CVE-2026-9198Tue, 04 Aug 2026 00:00:00 GMTIBM Langflow Code Injection Vulnerability (IBM Langflow) Added to CISA KEV 2026-08-04.CVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-18577CVE-2026-18577Mon, 03 Aug 2026 00:00:00 GMTN-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (N-able N-central) Added to CISA KEV 2026-08-03.CVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-20316CVE-2026-20316Wed, 29 Jul 2026 00:00:00 GMTCisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (Cisco Secure Firewall Management Center (FMC)) Added to CISA KEV 2026-07-29.CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2025-68686CVE-2025-68686Mon, 27 Jul 2026 00:00:00 GMTFortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (Fortinet FortiOS) Added to CISA KEV 2026-07-27.CVE-2026-16812: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerabilityhttps://eastbaycyber.com/content/cve-2026-16812/CVE-2026-16812Mon, 27 Jul 2026 00:00:00 GMTArista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability (Arista VeloCloud Orchestrator) Added to CISA KEV 2026-07-27.CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-16232CVE-2026-16232Wed, 22 Jul 2026 00:00:00 GMTCheck Point SmartConsole Improper Authentication Vulnerability (Check Point SmartConsole) Added to CISA KEV 2026-07-22.CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability https://eastbaycyber.com/content/cve-2026-50522/CVE-2026-50522Wed, 22 Jul 2026 00:00:00 GMTMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability (Microsoft SharePoint) Added to CISA KEV 2026-07-22.CVE-2026-60137: WordPress Core SQL Injection Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-60137CVE-2026-60137Tue, 21 Jul 2026 00:00:00 GMTWordPress Core SQL Injection Vulnerability (WordPress Core) Added to CISA KEV 2026-07-21.CVE-2026-63030: WordPress Core Interpretation Conflict Vulnerabilityhttps://eastbaycyber.com/content/cve-2026-63030/CVE-2026-63030Tue, 21 Jul 2026 00:00:00 GMTWordPress Core Interpretation Conflict Vulnerability (WordPress Core) Added to CISA KEV 2026-07-21.