JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,754 entries Clear search

cisa-kev-archive.log

  1. CVE-2025-68686

    Fortinet FortiOS

    Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in...

    Read the full description

    Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.

    Added
    2026-07-27
    Federal due date
    2026-08-10
    NVD entry

  2. CVE-2026-50522

    Microsoft SharePoint

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.

    Added
    2026-07-22
    Federal due date
    2026-07-25
    NVD entry4minx on GitHub

  3. CVE-2026-16232

    Check Point SmartConsole

    Check Point SmartConsole Improper Authentication Vulnerability

    Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.

    Added
    2026-07-22
    Federal due date
    2026-07-25
    NVD entrysfewer-r7 on GitHub

  4. CVE-2026-63030

    WordPress Core

    WordPress Core Interpretation Conflict Vulnerability

    WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.

    Added
    2026-07-21
    Federal due date
    2026-07-24
    NVD entryIcex0 on GitHubgichirimaku on GitHub

  5. CVE-2026-60137

    WordPress Core

    WordPress Core SQL Injection Vulnerability

    WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution...

    Read the full description

    WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations.

    Added
    2026-07-21
    Federal due date
    2026-08-04
    NVD entrycodeb0ssx on GitHub

  6. CVE-2026-0770

    Langflow Langflow

    Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations.

    Added
    2026-07-21
    Federal due date
    2026-07-24
    NVD entryExploit-DBaffix on GitHub

  7. CVE-2021-27137

    DD-WRT DD-WRT

    DD-WRT Stack-Based Buffer Overflow Vulnerability

    DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.

    Added
    2026-07-21
    Federal due date
    2026-07-24
    NVD entry

  8. CVE-2026-58644

    Microsoft SharePoint

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.

    Added
    2026-07-16
    Federal due date
    2026-07-19
    NVD entry

  9. CVE-2026-39808

    Fortinet FortiSandbox

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

    Added
    2026-07-16
    Federal due date
    2026-07-19
    NVD entryynsmroztas on GitHubsamu-delucas on GitHub

  10. CVE-2026-25089

    Fortinet FortiSandbox

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

    Added
    2026-07-16
    Federal due date
    2026-07-19
    NVD entryHORKimhab on GitHub

  11. CVE-2026-46817

    Oracle E-Business Suite

    Oracle E-Business Suite Improper Privilege Management Vulnerability

    Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in...

    Read the full description

    Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.

    Added
    2026-07-15
    Federal due date
    2026-07-18
    NVD entry

  12. CVE-2023-4346

    KNX Association KNX Protocol Connection Authorization Option 1

    KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

    KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a...

    Read the full description

    KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device.

    Added
    2026-07-15
    Federal due date
    2026-07-29
    NVD entry

  13. CVE-2026-56164

    Microsoft SharePoint Server

    Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

    Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.

    Added
    2026-07-14
    Federal due date
    2026-07-17
    NVD entrysentinel-aidefense on GitHub

  14. CVE-2026-56155

    Microsoft Active Directory Federation Services

    Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

    Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.

    Added
    2026-07-14
    Federal due date
    2026-07-28
    NVD entry

  15. CVE-2026-15410

    Ransomware

    SonicWall SMA1000 Appliances

    SonicWall SMA1000 Appliances Code Injection Vulnerability

    SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

    Added
    2026-07-14
    Federal due date
    2026-07-17
    NVD entry

  16. CVE-2026-15409

    Ransomware

    SonicWall SMA1000 Appliances

    SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

    SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.

    Added
    2026-07-14
    Federal due date
    2026-07-17
    NVD entryremmons-r7 on GitHubtc4dy on GitHub

  17. CVE-2008-4128

    Cisco IOS

    Cisco IOS Cross-Site Request Forgery Vulnerability

    Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command...

    Read the full description

    Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.

    Added
    2026-07-13
    Federal due date
    2026-07-16
    NVD entryExploit-DB

  18. CVE-2026-56291

    Balbooa Forms

    Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

    Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.

    Added
    2026-07-10
    Federal due date
    2026-07-13
    NVD entry

  19. CVE-2026-48939

    iCagenda iCagenda

    iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

    iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

    Added
    2026-07-10
    Federal due date
    2026-07-13
    NVD entry

  20. CVE-2026-56290

    Joomlack Page Builder

    Joomlack Page Builder Improper Access Control Vulnerability

    Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.

    Added
    2026-07-07
    Federal due date
    2026-07-10
    NVD entryExploit-DBJenderal92 on GitHub

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON