| Date Added | CVE | Vendor | Product | Vulnerability | EPSS | Percentile | Due Date | Sources |
|---|---|---|---|---|---|---|---|---|
| 2026-10-15 | CVE-2026-21589 | Atlassian | Multiple Products |
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
2.78% | 86.12% | 2026-10-18 | CISA NVD |
| 2026-10-14 | CVE-2026-105134 | Ahsay | AhsayCBS |
Ahsay AhsayCBS Command Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
3.24% | 88.06% | 2026-10-17 | CISA NVD |
| 2026-10-14 | CVE-2026-76519 | Cisco | Secure Email Gateway |
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.74% | 77.35% | 2026-10-17 | CISA NVD |
| 2026-10-14 | CVE-2026-105133 | Ahsay | AhsayCBS |
Ahsay AhsayCBS Improper Authentication Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.67% | 50.78% | 2026-10-17 | CISA NVD |
| 2026-10-14 | CVE-2026-0322 | Palo Alto Networks | PAN-OS |
Palo Alto Networks PAN-OS Code Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.08% | 64.35% | 2026-10-17 | CISA NVD |
| 2026-10-13 | CVE-2026-104935 | Ivanti | Connect Secure |
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
25.98% | 97.96% | 2026-10-16 | CISA NVD |
| 2026-10-13 | CVE-2026-96951 | Microsoft | Windows |
Microsoft Windows Command Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.51% | 73.99% | 2026-10-16 | CISA NVD |
| 2026-10-08 | CVE-2015-5477 | ISC | BIND |
ISC BIND Data Processing Errors Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
99.41% | 99.94% | 2026-10-11 | CISA NVD |
| 2026-10-08 | CVE-2016-3081 | Apache | Struts |
Apache Struts Command Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
96.05% | 99.88% | 2026-10-11 | CISA NVD |
| 2026-10-08 | CVE-2023-22894 | Strapi | Strapi |
Strapi Cleartext Storage of Sensitive Information Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
3.61% | 89.31% | 2026-10-11 | CISA NVD |
| 2026-10-08 | CVE-2021-3199 | ONLYOFFICE | Docs |
ONLYOFFICE Docs Server Path Traversal Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
19.35% | 97.32% | 2026-10-11 | CISA NVD |
| 2026-10-08 | CVE-2015-3306 | ProFTPD | ProFTPD |
ProFTPD Improper Access Control Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
99.50% | 99.95% | 2026-10-11 | CISA NVD |
| 2026-10-04 | CVE-2026-88779 | Citrix | NetScaler |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.59% | 47.11% | 2026-10-07 | CISA NVD |
| 2026-10-02 | CVE-2026-102490 | Zammad GmbH | Zammad |
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.55% | 44.75% | 2026-10-05 | CISA NVD |
| 2026-10-02 | CVE-2026-102489 | Zammad GmbH | Zammad |
Zammad GmbH Zammad Session Fixation Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.26% | 68.96% | 2026-10-05 | CISA NVD |
| 2026-10-01 | CVE-2026-104286 | Fortinet | FortiMail |
Fortinet FortiMail Path Traversal Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
2.20% | 82.19% | 2026-10-04 | CISA NVD |
| 2026-09-30 | CVE-2026-76504 | Cisco | Catalyst SD-WAN Manager |
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.82% | 78.34% | 2026-10-03 | CISA NVD |
| 2026-09-29 | CVE-2026-86950 | Apple | Multiple Products |
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.24% | 68.65% | 2026-10-13 | CISA NVD |
| 2026-09-27 | CVE-2026-88772 | Citrix | NetScaler |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.30% | 69.94% | 2026-09-30 | CISA NVD |
| 2026-09-27 | CVE-2026-88771 | Citrix | NetScaler |
Citrix NetScaler Improper Input Validation Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.08% | 64.57% | 2026-09-30 | CISA NVD |
| 2026-09-25 | CVE-2026-67279 | MikroTik | RouterOS |
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.03% | 62.93% | 2026-09-28 | CISA NVD |
| 2026-09-25 | CVE-2026-65660 | Microsoft | SharePoint |
Microsoft SharePoint Code Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
2.10% | 81.36% | 2026-09-28 | CISA NVD |
| 2026-09-25 | CVE-2026-87902 | WordPress | Core |
WordPress Core Remote File Inclusion Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
39.98% | 98.61% | 2026-09-28 | CISA NVD |
| 2026-09-24 | CVE-2026-5430 | WSO2 | Multiple Products |
WSO2 Multiple Products Path Traversal Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.59% | 46.95% | 2026-09-27 | CISA NVD |
| 2026-09-24 | CVE-2026-71362 | Adobe | Commerce and Magento |
Adobe Commerce and Magento Incorrect Authorization Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
87.51% | 99.76% | 2026-09-27 | CISA NVD |
| 2026-09-22 | CVE-2026-93952 | Arista | VeloCloud Orchestrator |
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.06% | 63.96% | 2026-09-25 | CISA NVD |
| 2026-09-22 | CVE-2026-94127 | F5 | BIG-IP APM |
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
2.23% | 82.40% | 2026-09-25 | CISA NVD |
| 2026-09-22 | CVE-2026-93616 | Check Point | Multiple Products |
Check Point Multiple Products Path Traversal Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
75.87% | 99.52% | 2026-09-25 | CISA NVD |
| 2026-09-22 | CVE-2026-85102 | Check Point | Multiple Products |
Check Point Multiple Products Improper Certificate Validation Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
50.40% | 98.90% | 2026-09-25 | CISA NVD |
| 2026-09-21 | CVE-2026-7273 | Zyxel | GS1900 Series Switches |
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
2.50% | 84.42% | 2026-09-24 | CISA NVD |
| 2026-09-18 | CVE-2025-39964 | Linux | Kernel |
Linux Kernel Race Condition Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.31% | 70.11% | 2026-09-21 | CISA NVD |
| 2026-09-18 | CVE-2026-53266 | Linux | Kernel |
Linux Kernel Out-of-Bounds Write Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.83% | 56.60% | 2026-09-21 | CISA NVD |
| 2026-09-18 | CVE-2025-39682 | Linux | Kernel |
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
2.88% | 86.60% | 2026-09-21 | CISA NVD |
| 2026-09-16 | CVE-2026-58704 | Pixel |
Google Pixel Improper Authorization Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.59% | 47.08% | 2026-09-19 | CISA NVD | |
| 2026-09-16 | CVE-2026-76460 | Cisco | Identity Services Engine |
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
14.03% | 96.51% | 2026-09-19 | CISA NVD |
| 2026-09-16 | CVE-2026-87886 | Acronis | Backup |
Acronis Backup Incorrect Default Permissions Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.23% | 13.16% | 2026-09-19 | CISA NVD |
| 2026-09-14 | CVE-2026-76461 | Cisco | Secure Email Gateway |
Cisco Secure Email Gateway SQL Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
29.54% | 98.17% | 2026-09-17 | CISA NVD |
| 2026-09-11 | CVE-2026-84869 | ConnectWise | ScreenConnect |
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.92% | 59.66% | 2026-09-14 | CISA NVD |
| 2026-09-11 | CVE-2026-42016 | JFrog | Artifactory |
JFrog Artifactory Incorrect Authorization Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
8.64% | 95.05% | 2026-09-25 | CISA NVD |
| 2026-09-11 | CVE-2026-42018 | JFrog | Artifactory |
JFrog Artifactory Improper Authentication Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
9.81% | 95.49% | 2026-09-25 | CISA NVD |
| 2026-09-11 | CVE-2026-85706 | GitLab | Community Edition and Enterprise Edition |
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
92.96% | 99.83% | 2026-09-14 | CISA NVD |
| 2026-09-10 | CVE-2026-86060 | MikroTik | RouterOS |
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
6.39% | 93.58% | 2026-09-13 | CISA NVD |
| 2026-09-10 | CVE-2026-67277 | MikroTik | RouterOS |
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.56% | 74.78% | 2026-09-13 | CISA NVD |
| 2026-09-09 | CVE-2026-19490 | Citrix | NetScaler |
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
23.16% | 97.74% | 2026-09-12 | CISA NVD |
| 2026-09-09 | CVE-2025-25249 | Fortinet | Multiple Products |
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
3.80% | 89.86% | 2026-09-12 | CISA NVD |
| 2026-09-09 | CVE-2026-87491 | Chromium V8 |
Google Chromium V8 Out of Bounds Write Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
3.14% | 87.69% | 2026-09-23 | CISA NVD | |
| 2026-09-09 | CVE-2026-20079 | Cisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management |
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
88.18% | 99.77% | 2026-09-12 | CISA NVD |
| 2026-09-08 | CVE-2026-75650 | Adobe | Commerce and Magento |
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
3.95% | 90.26% | 2026-09-11 | CISA NVD |
| 2026-09-08 | CVE-2026-81963 | Microsoft | Windows |
Microsoft Windows Link Following Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.39% | 31.87% | 2026-09-22 | CISA NVD |
| 2026-09-08 | CVE-2026-86218 | N-able | N-central |
N-able N-central Static Code Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
13.35% | 96.37% | 2026-09-11 | CISA NVD |
| 2026-09-08 | CVE-2026-85880 | Microsoft | Windows |
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
3.62% | 89.33% | 2026-09-22 | CISA NVD |
| 2026-09-04 | CVE-2026-85046 | Chromium V8 |
Google Chromium V8 Type Confusion Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
48.88% | 98.86% | 2026-09-18 | CISA NVD | |
| 2026-09-02 | CVE-2026-59822 | BerriAI | LiteLLM |
BerriAI LiteLLM Improper Authentication Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.84% | 56.87% | 2026-09-16 | CISA NVD |
| 2026-09-02 | CVE-2026-48710 | Kludex | Starlette |
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
7.06% | 94.12% | 2026-09-16 | CISA NVD |
| 2026-09-02 | CVE-2026-49869 | Kestra | Kestra OSS |
Kestra OSS OS Command Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
2.10% | 81.31% | 2026-09-05 | CISA NVD |
| 2026-09-02 | CVE-2026-82329 | JFrog | Artifactory |
JFrog Artifactory Improper Authentication Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
14.12% | 96.53% | 2026-09-05 | CISA NVD |
| 2026-09-02 | CVE-2026-9586 | Sangoma | Switchvox |
Sangoma Switchvox SQL Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
18.98% | 97.27% | 2026-09-05 | CISA NVD |
| 2026-09-02 | CVE-2026-83548 | SonicWall | SMA1000 Appliances |
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
8.04% | 94.72% | 2026-09-05 | CISA NVD |
| 2026-09-02 | CVE-2026-83549 | SonicWall | SMA1000 Appliances |
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
9.89% | 95.52% | 2026-09-05 | CISA NVD |
| 2026-08-31 | CVE-2026-82078 | PaperCut | NG/MF |
PaperCut NG/MF Unsafe Reflection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
63.53% | 99.21% | 2026-09-14 | CISA NVD |
| 2026-08-31 | CVE-2026-81578 | PaperCut | NG/MF |
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
85.58% | 99.72% | 2026-09-14 | CISA NVD |
| 2026-08-27 | CVE-2023-49105 | ownCloud | ownCloud |
ownCloud Improper Authentication Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
42.92% | 98.70% | 2026-08-30 | CISA NVD |
| 2026-08-27 | CVE-2026-53362 | Linux | Kernel |
Linux Kernel Unspecified Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.71% | 52.52% | 2026-08-30 | CISA NVD |
| 2026-08-27 | CVE-2026-66384 | JFrog | Artifactory |
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.66% | 50.71% | 2026-09-10 | CISA NVD |
| 2026-08-26 | CVE-2021-23758 | Ajax.NET Professional | Ajax.NET Professional |
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
82.58% | 99.66% | 2026-09-09 | CISA NVD |
| 2026-08-26 | CVE-2015-3246 | Red Hat | Libuser |
Red Hat Libuser Race Condition Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
8.50% | 94.97% | 2026-09-09 | CISA NVD |
| 2026-08-26 | CVE-2015-5287 | Red Hat | Automatic Bug Reporting Tool |
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
5.00% | 92.12% | 2026-09-09 | CISA NVD |
| 2026-08-26 | CVE-2022-0995 | Linux | Kernel |
Linux Kernel Out-of-Bounds Write Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
8.86% | 95.15% | 2026-08-29 | CISA NVD |
| 2026-08-26 | CVE-2026-8452 | Citrix | NetScaler ADC and NetScaler Gateway |
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.01% | 62.48% | 2026-08-29 | CISA NVD |
| 2026-08-26 | CVE-2019-1068 | Microsoft | SQL Server |
Microsoft SQL Server Remote Code Execution Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
57.27% | 99.07% | 2026-08-29 | CISA NVD |
| 2026-08-25 | CVE-2026-60004 | Gitea | Gitea |
Gitea Code Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
23.99% | 97.82% | 2026-08-28 | CISA NVD |
| 2026-08-24 | CVE-2026-21962 | Oracle | HTTP Server and Oracle Weblogic Server Proxy Plug-in |
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
73.19% | 99.46% | 2026-08-27 | CISA NVD |
| 2026-08-21 | CVE-2026-73570 | Synacor | Zimbra Collaboration Suite (ZCS) |
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
71.66% | 99.42% | 2026-08-24 | CISA NVD |
| 2026-08-20 | CVE-2026-72530 | TrueConf | Server |
TrueConf Server Code Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.69% | 76.60% | 2026-09-03 | CISA NVD |
| 2026-08-20 | CVE-2026-72529 | TrueConf | Server |
TrueConf Server Missing Authentication for Critical Function Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.46% | 73.16% | 2026-08-23 | CISA NVD |
| 2026-08-19 | CVE-2026-64849 | MLflow | MLflow |
MLflow Server-Side Request Forgery Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
9.84% | 95.51% | 2026-09-02 | CISA NVD |
| 2026-08-18 | CVE-2026-33824 | Microsoft | Internet Key Exchange (IKE) Service Extensions |
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.62% | 75.63% | 2026-08-21 | CISA NVD |
| 2026-08-18 | CVE-2026-59310 | Broadcom | VMware vCenter |
Broadcom VMware vCenter Path Traversal Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
2.57% | 84.85% | 2026-08-21 | CISA NVD |
| 2026-08-18 | CVE-2026-55040 | Microsoft | SharePoint |
Microsoft SharePoint Weak Authentication Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
69.54% | 99.36% | 2026-08-21 | CISA NVD |
| 2026-08-18 | CVE-2026-65400 | Apple | macOS |
Apple macOS Improper Authentication Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.72% | 77.09% | 2026-08-21 | CISA NVD |
| 2026-08-17 | CVE-2025-62593 | Ray-Project | Ray |
Ray-Project Ray Code Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
62.46% | 99.18% | 2026-08-20 | CISA NVD |
| 2026-08-11 | CVE-2026-20349 | Cisco | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.01% | 62.45% | 2026-08-14 | CISA NVD |
| 2026-08-11 | CVE-2026-68820 | Microsoft | Windows Ancillary Function Driver for WinSock |
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
0.33% | 24.77% | 2026-08-25 | CISA NVD |
| 2026-08-11 | CVE-2026-72898 | Metabase | Metabase |
Metabase SQL Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
97.34% | 99.90% | 2026-08-14 | CISA NVD |
| 2026-08-07 | CVE-2026-8037 | Progress | LoadMaster |
Progress LoadMaster Command Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
77.36% | 99.55% | 2026-08-10 | CISA NVD |
| 2026-08-05 | CVE-2026-63077 | JetBrains | TeamCity |
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
89.57% | 99.79% | 2026-08-08 | CISA NVD |
| 2026-08-04 | CVE-2026-18556 | N-able | N-central |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
7.88% | 94.64% | 2026-08-07 | CISA NVD |
| 2026-08-04 | CVE-2026-34486 | Apache | Tomcat |
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
6.56% | 93.73% | 2026-08-07 | CISA NVD |
| 2026-08-04 | CVE-2026-9198 | IBM | Langflow |
IBM Langflow Code Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
28.66% | 98.12% | 2026-08-07 | CISA NVD |
| 2026-08-03 | CVE-2026-18577 | N-able | N-central |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
14.62% | 96.62% | 2026-08-06 | CISA NVD |
| 2026-07-29 | CVE-2026-20316 | Cisco | Secure Firewall Management Center (FMC) |
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
35.10% | 98.42% | 2026-08-01 | CISA NVD |
| 2026-07-27 | CVE-2025-68686 | Fortinet | FortiOS |
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
29.50% | 98.17% | 2026-08-10 | CISA NVD |
| 2026-07-27 | CVE-2026-16812 | Arista | VeloCloud Orchestrator |
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
1.00% | 62.12% | 2026-07-30 | CISA NVD |
| 2026-07-22 | CVE-2026-16232 | Check Point | SmartConsole |
Check Point SmartConsole Improper Authentication Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
77.97% | 99.57% | 2026-07-25 | CISA NVD |
| 2026-07-22 | CVE-2026-50522 | Microsoft | SharePoint |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
3.04% | 87.29% | 2026-07-25 | CISA NVD |
| 2026-07-21 | CVE-2026-60137 | WordPress | Core |
WordPress Core SQL Injection Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
5.32% | 92.50% | 2026-08-04 | CISA NVD |
| 2026-07-21 | CVE-2026-63030 | WordPress | Core |
WordPress Core Interpretation Conflict Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
10.65% | 95.75% | 2026-07-24 | CISA NVD |
| 2026-07-21 | CVE-2026-0770 | Langflow | Langflow |
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
63.01% | 99.19% | 2026-07-24 | CISA NVD |
| 2026-07-21 | CVE-2021-27137 | DD-WRT | DD-WRT |
DD-WRT Stack-Based Buffer Overflow Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
4.00% | 90.38% | 2026-07-24 | CISA NVD |
| 2026-07-16 | CVE-2026-58644 | Microsoft | SharePoint |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
|
15.87% | 96.85% | 2026-07-19 | CISA NVD |
