Vulnerabilities added to KEV in August 2026
Added31
Ransomware-linked2
Vendors23
By vendor
4
2
2
2
2
2
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-82078 | PaperCut NG/MF | 2026-08-31 | 63.5% | Unknown |
| CVE-2026-81578 | PaperCut NG/MF | 2026-08-31 | 85.5% | Unknown |
| CVE-2026-66384 | JFrog Artifactory | 2026-08-27 | 0.6% | Unknown |
| CVE-2026-53362 | Linux Kernel | 2026-08-27 | 0.7% | Unknown |
| CVE-2023-49105 | ownCloud ownCloud | 2026-08-27 | 42.9% | Unknown |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 2026-08-26 | 1.0% | Unknown |
| CVE-2022-0995 | Linux Kernel | 2026-08-26 | 8.7% | Unknown |
| CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professional | 2026-08-26 | 82.5% | Unknown |
| CVE-2019-1068 | Microsoft SQL Server | 2026-08-26 | 57.2% | Unknown |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | 2026-08-26 | 4.9% | Unknown |
| CVE-2015-3246 | Red Hat Libuser | 2026-08-26 | 8.4% | Unknown |
| CVE-2026-60004 | Gitea Gitea | 2026-08-25 | 23.9% | Unknown |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 73.1% | Unknown |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 71.6% | Unknown |
| CVE-2026-72530 | TrueConf Server | 2026-08-20 | 1.6% | Unknown |
| CVE-2026-72529 | TrueConf Server | 2026-08-20 | 1.4% | Unknown |
| CVE-2026-64849 | MLflow MLflow | 2026-08-19 | 9.8% | Unknown |
| CVE-2026-65400 | Apple macOS | 2026-08-18 | 1.7% | Unknown |
| CVE-2026-59310 | Broadcom VMware vCenter | 2026-08-18 | 2.5% | Known |
| CVE-2026-55040 | Microsoft SharePoint | 2026-08-18 | 69.5% | Unknown |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | 2026-08-18 | 1.6% | Unknown |
| CVE-2025-62593 | Ray-Project Ray | 2026-08-17 | 62.4% | Unknown |
| CVE-2026-72898 | Metabase Metabase | 2026-08-11 | 19.0% | Unknown |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | 2026-08-11 | 0.3% | Unknown |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | 1.0% | Unknown |
| CVE-2026-8037 | Progress LoadMaster | 2026-08-07 | 77.3% | Unknown |
| CVE-2026-63077 | JetBrains TeamCity | 2026-08-05 | 89.5% | Known |
| CVE-2026-9198 | IBM Langflow | 2026-08-04 | 28.6% | Unknown |
| CVE-2026-34486 | Apache Tomcat | 2026-08-04 | 6.5% | Unknown |
| CVE-2026-18556 | N-able N-central | 2026-08-04 | 7.8% | Unknown |
| CVE-2026-18577 | N-able N-central | 2026-08-03 | 14.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.