Security Digest archive
July 2026
21 editorial briefs, 26 known exploited (cisa kev) additions and 127 critical advisories across 24 digest days.
Friday, July 31, 2026
Thursday, July 30, 2026
- Most can relax Claude Evals Reached 3 Real Orgs, Published a PyPI Stealer
- Critical 4 advisories: activestorage, flyto-core, @aws-amplify/codegen-ui-react, flyto-core
Wednesday, July 29, 2026
- Act now VMware vCenter CVE-2026-59310: Exploited Syslog RCE
- Act now Cisco FMC CVE-2026-20316: Exploited Hard-Coded Password
- Patch this week Node.js July 2026 Security Releases: HTTP/2 and 11 CVEs
- KEV CVE-2026-20316 Cisco Secure Firewall Management Center (FMC)
- Critical 2 advisories: github.com/kube-logging/logging-operator, github.com/prebid/prebid-server/v4
Tuesday, July 28, 2026
- Critical 5 advisories: github.com/patrickhener/goshs/v2, goshs.de/goshs/v2, @hypequery/clickhouse, lettre, poweradmin/poweradmin
Monday, July 27, 2026
- Act now Arista VeloCloud Orchestrator: Two Exploited CVSS 10 Flaws
- Act now Gitea CVE-2026-60004: Exploited RCE via diffpatch API
- Act now TeamCity CVE-2026-63077: Unauthenticated RCE, Exploited
- KEV CVE-2026-16812 Arista VeloCloud Orchestrator
- KEV CVE-2025-68686 Fortinet FortiOS
Friday, July 24, 2026
Thursday, July 23, 2026
- Critical 3 advisories: com.alibaba:fastjson, next-auth, @auth/core
Wednesday, July 22, 2026
- Patch this week Check Point CVE-2026-16232: Exploited Management Auth Bypass
- KEV CVE-2026-50522 Microsoft SharePoint
- KEV CVE-2026-16232 Check Point SmartConsole
Tuesday, July 21, 2026
- KEV CVE-2026-63030 WordPress Core
- KEV CVE-2026-60137 WordPress Core
- KEV CVE-2026-0770 Langflow Langflow
- KEV CVE-2021-27137 DD-WRT DD-WRT
- Critical 8 advisories: code.gitea.io/gitea, code.gitea.io/gitea, @sigstore/oci, @vitest/browser, code.gitea.io/gitea, code.gitea.io/gitea, homeassistant, code.gitea.io/gitea
Monday, July 20, 2026
- Check exposure Zimbra CVE-2026-73570: Exploited SNMP Command Injection
- Critical 3 advisories: lightrag-hku, lightrag-hku, tar
Friday, July 17, 2026
Thursday, July 16, 2026
- Check exposure Hugging Face Breached by Escaped OpenAI Evaluation Agents
- KEV CVE-2026-58644 Microsoft SharePoint
- KEV CVE-2026-39808 Fortinet FortiSandbox
- KEV CVE-2026-25089 Fortinet FortiSandbox
- Critical 3 advisories: github.com/envoyproxy/gateway, pheditor/pheditor, snowflake-connector-python
Wednesday, July 15, 2026
- KEV CVE-2026-46817 Oracle E-Business Suite
- KEV CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1
- Critical 5 advisories: websocket-driver, mantisbt/mantisbt, mantisbt/mantisbt, gpt-researcher, mantisbt/mantisbt
Tuesday, July 14, 2026
- Act now SonicWall SMA1000: Two Rounds of Exploited Zero-Days
- Act now SharePoint: Four July-August 2026 Flaws Now Exploited
- Act now Sangoma Switchvox CVE-2026-9586: Pre-Auth SQLi to RCE
- Act now SharePoint CVE-2026-56164: Exploited Unauthenticated 0-Day
- Patch this week AD FS CVE-2026-56155: Exploited EoP via Weak DKM Key ACLs
- Check exposure AsyncAPI npm Packages Backdoored via pull_request_target
- KEV CVE-2026-56164 Microsoft SharePoint Server
- KEV CVE-2026-56155 Microsoft Active Directory Federation Services
- KEV CVE-2026-15410 SonicWall SMA1000 Appliances
- KEV CVE-2026-15409 SonicWall SMA1000 Appliances
- Critical 5 advisories: github.com/julien040/anyquery, n8n-mcp, facturascripts/facturascripts, tidgi, facturascripts/facturascripts
Monday, July 13, 2026
- Check exposure ServiceNow CVE-2026-6875: Pre-Auth Sandbox Escape RCE
- Check exposure Cisco IOS CVE-2008-4128: 18-Year-Old CSRF in CISA KEV
- KEV CVE-2008-4128 Cisco IOS
- Critical 5 advisories: DIRAC, kimai/kimai, facturascripts/facturascripts, DIRAC, @sap/approuter
Saturday, July 11, 2026
- Check exposure jscrambler npm Compromise: Infostealer in CLI Releases
Friday, July 10, 2026
- KEV CVE-2026-56291 Balbooa Forms
- KEV CVE-2026-48939 iCagenda iCagenda
- Critical 11 advisories: github.com/filebrowser/filebrowser/v2, mcp-server-kubernetes, github.com/siyuan-note/siyuan/kernel, github.com/filebrowser/filebrowser/v2, prestashop/ps_facetedsearch, github.com/siyuan-note/siyuan/kernel, github.com/authorizerdev/authorizer, github.com/almeidapaulopt/tsdproxy, exploration, github.com/siyuan-note/siyuan/kernel, github.com/siyuan-note/siyuan/kernel
Thursday, July 9, 2026
- Check exposure Balbooa Forms CVE-2026-56291: Exploited Joomla Upload RCE
- Critical 3 advisories: yeswiki/yeswiki, yeswiki/yeswiki, yeswiki/yeswiki
Wednesday, July 8, 2026
- Critical 2 advisories: github.com/BishopFox/joro, github.com/nuclio/nuclio
Tuesday, July 7, 2026
- KEV CVE-2026-56290 Joomlack Page Builder
- KEV CVE-2026-55255 Langflow Langflow
- KEV CVE-2026-48908 JoomShaper SP Page Builder
- KEV CVE-2026-48282 Adobe ColdFusion
- Critical 7 advisories: better-auth, egroupware/egroupware, github.com/mudler/LocalAI, @better-auth/sso, cognee, apache-airflow, github.com/zhenorzz/goploy
Monday, July 6, 2026
- Critical 19 advisories: zebrad, org.apache.camel:camel-aws2-sns, 9router, org.apache.camel:camel-docling, org.apache.camel:camel-cometd, 9router, org.apache.camel:camel-keycloak, langroid, org.apache.camel:camel-keycloak, @xhmikosr/decompress, org.apache.camel:camel-dns, org.apache.camel:camel-mongodb-gridfs …
Friday, July 3, 2026
- Critical 6 advisories: code.gitea.io/gitea, code.gitea.io/gitea, code.gitea.io/gitea, code.gitea.io/gitea, code.gitea.io/gitea, code.gitea.io/gitea
Thursday, July 2, 2026
- Critical 9 advisories: openclaw, fast-mcp-telegram, 9router, zebra-script, 9router, mautic/core, mcp-memory-service, mautic/core, pro.gravit.launcher:launchserver-api
Wednesday, July 1, 2026
- KEV CVE-2026-45659 Microsoft SharePoint Server
- Critical 5 advisories: github.com/rancher/fleet, github.com/rancher/rancher, github.com/rancher/rancher, ghost, quic