Exploited Vulnerabilities DailyVulnerabilities added to KEV in July 2026
Added26
Ransomware-linked4
Vendors16
By vendor
5
3
2
2
2
2
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) | 2026-07-29 | 35.0% | Known |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 2026-07-27 | 1.0% | Unknown |
| CVE-2025-68686 | Fortinet FortiOS | 2026-07-27 | 29.4% | Unknown |
| CVE-2026-50522 | Microsoft SharePoint | 2026-07-22 | 3.0% | Unknown |
| CVE-2026-16232 | Check Point SmartConsole | 2026-07-22 | 77.9% | Unknown |
| CVE-2026-63030 | WordPress Core | 2026-07-21 | 10.6% | Unknown |
| CVE-2026-60137 | WordPress Core | 2026-07-21 | 5.3% | Unknown |
| CVE-2026-0770 | Langflow Langflow | 2026-07-21 | 63.0% | Unknown |
| CVE-2021-27137 | DD-WRT DD-WRT | 2026-07-21 | 3.9% | Unknown |
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | 15.8% | Unknown |
| CVE-2026-39808 | Fortinet FortiSandbox | 2026-07-16 | 47.3% | Unknown |
| CVE-2026-25089 | Fortinet FortiSandbox | 2026-07-16 | 76.1% | Unknown |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 0.8% | Unknown |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 | 2026-07-15 | 1.2% | Unknown |
| CVE-2026-56164 | Microsoft SharePoint Server | 2026-07-14 | 1.0% | Unknown |
| CVE-2026-56155 | Microsoft Active Directory Federation Services | 2026-07-14 | 0.3% | Unknown |
| CVE-2026-15410 | SonicWall SMA1000 Appliances | 2026-07-14 | 11.7% | Known |
| CVE-2026-15409 | SonicWall SMA1000 Appliances | 2026-07-14 | 6.7% | Known |
| CVE-2008-4128 | Cisco IOS | 2026-07-13 | 33.8% | Unknown |
| CVE-2026-56291 | Balbooa Forms | 2026-07-10 | 14.8% | Unknown |
| CVE-2026-48939 | iCagenda iCagenda | 2026-07-10 | 20.0% | Unknown |
| CVE-2026-56290 | Joomlack Page Builder | 2026-07-07 | 30.8% | Unknown |
| CVE-2026-55255 | Langflow Langflow | 2026-07-07 | 0.8% | Unknown |
| CVE-2026-48908 | JoomShaper SP Page Builder | 2026-07-07 | 88.5% | Unknown |
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | 42.3% | Unknown |
| CVE-2026-45659 | Microsoft SharePoint Server | 2026-07-01 | 2.7% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.