Week 29, 2026
13 July to 19 July 2026. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- CVEs published
- 2,692
- Critical
- 289
- High
- 1,314
- Added to KEV
- 10
Critical 289High 1,314Medium 978Low 87Not scored 24All 2,692 in the list
Added to KEVAttackers use these now; patch them first
- CVE-2026-58644
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedCritical9.8 - CVE-2026-25089
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…
Fortinet · FortiSandbox
ExploitedCritical9.1 - CVE-2026-39808
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may…
Fortinet · FortiSandbox
ExploitedCritical9.1 - CVE-2026-46817
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are…
Oracle Corporation · Oracle Payments
ExploitedCritical9.8 - CVE-2023-4346
KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable…
KNX Association · KNX Protocol Connection Authorization Option 1
ExploitedHigh7.5 - CVE-2026-15409
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could…
SonicWall · SMA1000
ExploitedCritical10.0 - CVE-2026-56155
Active Directory Federation Services Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.8 - CVE-2026-15410
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console…
SonicWall · SMA1000
ExploitedHigh7.2 - CVE-2026-56164
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedMedium5.3 - CVE-2008-4128
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow…
Product not named
ExploitedHigh8.1
Most severe new CVEsBy CVSS score
- CVE-2026-15409
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could…
SonicWall · SMA1000
ExploitedCritical10.0 - CVE-2026-46339
9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes
decolua · 9router
Critical10.0 - CVE-2026-44359
Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow
meshtastic · firmware
Critical10.0 - CVE-2026-52887
NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE
nocobase · nocobase
Critical10.0 - CVE-2026-50148
Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write
metabase · metabase
Critical10.0 - CVE-2026-44181
Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution
jupyter-server · enterprise_gateway
Critical10.0 - CVE-2026-54159
ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE
PrestaShop · ps_facetedsearch
Critical10.0 - CVE-2026-44182
Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering
jupyter-server · enterprise_gateway
Critical10.0 - CVE-2026-63795
9p: avoid putting oldfid in p9_client_walk() error path
Linux · Linux
Critical10.0 - CVE-2026-62422
In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database…
JetBrains · YouTrack
Critical10.0