Added to KEV in 2026-07

CVE-2026-20316 – Cisco Secure Firewall Management Center (FMC) (added 2026-07-29)
CVE-2026-16812 – Arista VeloCloud Orchestrator (added 2026-07-27)
CVE-2025-68686 – Fortinet FortiOS (added 2026-07-27)
CVE-2026-50522 – Microsoft SharePoint (added 2026-07-22)
CVE-2026-16232 – Check Point SmartConsole (added 2026-07-22)
CVE-2026-63030 – WordPress Core (added 2026-07-21)
CVE-2026-60137 – WordPress Core (added 2026-07-21)
CVE-2026-0770 – Langflow Langflow (added 2026-07-21)
CVE-2021-27137 – DD-WRT DD-WRT (added 2026-07-21)
CVE-2026-58644 – Microsoft SharePoint (added 2026-07-16)
CVE-2026-39808 – Fortinet FortiSandbox (added 2026-07-16)
CVE-2026-25089 – Fortinet FortiSandbox (added 2026-07-16)
CVE-2026-46817 – Oracle E-Business Suite (added 2026-07-15)
CVE-2023-4346 – KNX Association KNX Protocol Connection Authorization Option 1 (added 2026-07-15)
CVE-2026-56164 – Microsoft SharePoint Server (added 2026-07-14)
CVE-2026-56155 – Microsoft Active Directory Federation Services (added 2026-07-14)
CVE-2026-15410 – SonicWall SMA1000 Appliances (added 2026-07-14)
CVE-2026-15409 – SonicWall SMA1000 Appliances (added 2026-07-14)
CVE-2008-4128 – Cisco IOS (added 2026-07-13)
CVE-2026-56291 – Balbooa Forms (added 2026-07-10)
CVE-2026-48939 – iCagenda iCagenda (added 2026-07-10)
CVE-2026-56290 – Joomlack Page Builder (added 2026-07-07)
CVE-2026-55255 – Langflow Langflow (added 2026-07-07)
CVE-2026-48908 – JoomShaper SP Page Builder (added 2026-07-07)
CVE-2026-48282 – Adobe ColdFusion (added 2026-07-07)
CVE-2026-45659 – Microsoft SharePoint Server (added 2026-07-01)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).