CISA KEV Archives • Daily CyberSecurity

CISA Adds Six Exploited Vulnerabilities Including Citrix NetScaler Flaw CISA KEV Catalog warning showing six exploited vulnerabilities and Citrix NetScaler flaw CVE-2026-8452

CISA KEV Catalog warning showing six exploited vulnerabilities and Citrix NetScaler flaw CVE-2026-8452

CISA Adds Six Exploited Vulnerabilities Including Citrix NetScaler Flaw

Do Son August 27, 2026

TL;DR CISA added six exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog on August 26, 2026. The...

CVE-2026-21962 Oracle Flaw: CVSS 10 Exploited in Wild CVE-2026-21962 Oracle flaw exploited in the wild

CVE-2026-21962 Oracle Flaw: CVSS 10 Exploited in Wild

Do Son August 25, 2026

CISA added a critical vulnerability to its Known Exploited Vulnerabilities catalog following confirmed active exploitation. This CVE-2026-21962...

Australia Warns of Hackers Exploiting TeamCity Flaw, PoC Public TeamCity CVE-2026-63077 unauthenticated remote code execution vulnerability exploited in the wild with public proof-of-concept

TeamCity CVE-2026-63077 unauthenticated remote code execution vulnerability exploited in the wild with public proof-of-concept

Australia Warns of Hackers Exploiting TeamCity Flaw, PoC Public

Do Son August 24, 2026

Attackers are actively targeting JetBrains TeamCity servers in the wild. The TeamCity CVE-2026-63077 vulnerability allows unauthenticated remote...

Weekly Threat Intelligence Report: Late August 2026 Chart summarizing the CVE weekly report with 9 exploited vulnerabilities added to the CISA KEV catalog

Chart summarizing the CVE weekly report with 9 exploited vulnerabilities added to the CISA KEV catalog

Weekly Threat Intelligence Report: Late August 2026

Do Son August 24, 2026

Welcome to the latest CVE WATCHTOWER security briefing. Our weekly threat intelligence report highlights a dangerous surge...

CVE-2026-72529 and CVE-2026-72530 Exploited in the Wild: TrueConf Server Under Attack TrueConf Server vulnerabilities CVE-2026-72529 CVE-2026-72530 exploited in the wild delivering PhantomCore malware advisory

TrueConf Server vulnerabilities CVE-2026-72529 CVE-2026-72530 exploited in the wild delivering PhantomCore malware advisory

CVE-2026-72529 and CVE-2026-72530 Exploited in the Wild: TrueConf Server Under Attack

Do Son August 20, 2026

TL;DR CISA added two TrueConf Server flaws to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-72529 and...

CVE-2025-62593: Ray RCE Exploited in the Wild, PoC Public CVE-2025-62593 Ray remote code execution vulnerability exploited in the wild DNS rebinding proof-of-concept exploit

CVE-2025-62593 Ray remote code execution vulnerability exploited in the wild DNS rebinding proof-of-concept exploit

CVE-2025-62593: Ray RCE Exploited in the Wild, PoC Public

Do Son August 17, 2026

TL;DR CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog. The flaw is a code injection bug...

Weekly Threat Intelligence Report: Mid-August 2026 Read our weekly threat intelligence report for mid-August 2026.

Weekly Threat Intelligence Report: Mid-August 2026

Do Son August 17, 2026

Welcome to the latest CVE WATCHTOWER briefing. Our team compiled this weekly threat intelligence report to highlight...

Weekly CVE Report: 6 Actively Exploited Flaws and 1,877 New CVEs Weekly CVE report dashboard showing actively exploited vulnerabilities and new CVE counts for early August 2026

Weekly CVE report dashboard showing actively exploited vulnerabilities and new CVE counts for early August 2026

Weekly CVE Report: 6 Actively Exploited Flaws and 1,877 New CVEs

Do Son August 10, 2026

Security teams tracked 1,877 new vulnerabilities between August 3 and August 9, 2026. This weekly CVE report,...

CVE-2026-63077: TeamCity RCE Flaw Exploited in the Wild, CISA Warns JetBrains TeamCity vulnerability CVE-2026-63077 remote code execution alert added to CISA KEV catalog

JetBrains TeamCity vulnerability CVE-2026-63077 remote code execution alert added to CISA KEV catalog

CVE-2026-63077: TeamCity RCE Flaw Exploited in the Wild, CISA Warns

Do Son August 6, 2026

TL;DR CISA added the TeamCity vulnerability CVE-2026-63077 to its Known Exploited Vulnerabilities catalog. The flaw allows unauthenticated...

N-able N-central Flaw Exploited in the Wild as CISA Adds Three to KEV Catalog N-able N-central authentication bypass exploited in the wild added to CISA KEV catalog alongside IBM Langflow and Apache Tomcat flaws

N-able N-central authentication bypass exploited in the wild added to CISA KEV catalog alongside IBM Langflow and Apache Tomcat flaws

N-able N-central Flaw Exploited in the Wild as CISA Adds Three to KEV Catalog

Do Son August 5, 2026

TL;DR CISA added three actively exploited flaws to its Known Exploited Vulnerabilities catalog on August 4, 2026....

SonicWall SMA Exploit Chain Now Fuels INC Ransomware Attacks SonicWall SMA exploit chain diagram showing wsproxy bypass leading to INC Ransomware root access

SonicWall SMA exploit chain diagram showing wsproxy bypass leading to INC Ransomware root access

SonicWall SMA Exploit Chain Now Fuels INC Ransomware Attacks

Do Son August 3, 2026

Malware family ROOTRUN, KNUCKLEBALL, Suo5, ORANGETAIL Threat actor UTA0533 (pre-disclosure cluster, suspected link to INC Ransomware); INC...

CVE Weekly Roundup: July 27 – August 2, 2026 CVE weekly roundup dashboard showing 2077 new vulnerabilities and CISA KEV additions

CVE Weekly Roundup: July 27 – August 2, 2026

Do Son August 3, 2026

The CVE WATCHTOWER logged 2,077 new vulnerabilities between July 27 and August 2, 2026. This CVE weekly...

CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited CISA KEV additions listing two known exploited vulnerabilities in Arista VeloCloud and FortiOS

CISA KEV additions listing two known exploited vulnerabilities in Arista VeloCloud and FortiOS

CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited

Do Son July 27, 2026

TL;DR: On July 27, 2026, CISA made two KEV additions. Both are known exploited vulnerabilities. One is...

Weekly Threat Intelligence Briefing: Late July 2026 CISA flagged 6 actively exploited CVEs this week, from a SharePoint RCE to a Check Point auth bypass. See the full CISA KEV list and patch fast.

CISA flagged 6 actively exploited CVEs this week, from a SharePoint RCE to a Check Point auth bypass. See the full CISA KEV list and patch fast.

Weekly Threat Intelligence Briefing: Late July 2026

Do Son July 27, 2026

The cyber threat landscape is becoming highly unstable. Specifically, our weekly threat intelligence briefing reveals an unprecedented...

CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog CISA KEV catalog adding four known exploited vulnerabilities including WordPress and Langflow RCE

CISA KEV catalog adding four known exploited vulnerabilities including WordPress and Langflow RCE

CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog

Do Son July 21, 2026

TL;DR CISA added four flaws to its KEV catalog on July 21, 2026. The list covers critical...

Mid-July 2026: Weekly Threat Intelligence Report actively exploited vulnerabilities

Mid-July 2026: Weekly Threat Intelligence Report

Do Son July 20, 2026

Welcome to the CVE WATCHTOWER briefing. Our latest weekly threat intelligence report reveals an alarming surge in...

Weekly CVE Report: 1,571 New Flaws and 6 Actively Exploited Bugs (July 6–12, 2026) weekly CVE report actively exploited vulnerabilities

Weekly CVE Report: 1,571 New Flaws and 6 Actively Exploited Bugs (July 6–12, 2026)

Do Son July 13, 2026

Last week brought a heavy load for defenders. This weekly CVE report from CVE WATCHTOWER counts 1,571...

Weekly Threat Intelligence: The July 2026 Breaches Weekly Threat Intelligence Active Vulnerability Report

Weekly Threat Intelligence: The July 2026 Breaches

Do Son July 6, 2026

Welcome to the latest weekly threat intelligence briefing. Our cyber defense team processed 1,939 new vulnerabilities between...

Actively exploited SharePoint vulnerability CVE-2026-45659 enabling remote code execution, added to CISA KEV

Actively Exploited SharePoint Vulnerability Added to CISA KEV Catalog

Do Son July 2, 2026

TL;DR CISA added a Microsoft SharePoint vulnerability to its Known Exploited Vulnerabilities catalog on 1 July 2026....

Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes Public Cisco Unified CM RCE flaw CVE-2026-20230 exploited in the wild with public PoC exploit code

Cisco Unified CM RCE flaw CVE-2026-20230 exploited in the wild with public PoC exploit code

Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes Public

Do Son June 29, 2026

TL;DR Attackers are exploiting a Cisco Unified CM RCE flaw in live attacks. Tracked as CVE-2026-20230, it...

Weekly CVE Report Logs 1,909 New Vulnerabilities and 6 Exploited Flaws Weekly CVE report June 2026 1909 new vulnerabilities CISA KEV CVE-2026-20230 exploited

Weekly CVE report June 2026 1909 new vulnerabilities CISA KEV CVE-2026-20230 exploited

Weekly CVE Report Logs 1,909 New Vulnerabilities and 6 Exploited Flaws

Do Son June 29, 2026

TL;DR This weekly CVE report covers 1,909 new vulnerabilities published between June 22 and 28, 2026. Critical...

CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV Catalog CISA KEV Catalog adding CVE-2026-20230 Cisco Unified CM and CVE-2026-12569 PTC Windchill vulnerabilities

CISA KEV Catalog adding CVE-2026-20230 Cisco Unified CM and CVE-2026-12569 PTC Windchill vulnerabilities

CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV Catalog

Do Son June 26, 2026

TL;DR The CISA KEV Catalog gained two new entries on June 25, 2026. Both additions cite evidence...