---
title: "Known exploited vulnerabilities"
url: https://erroneo.us/security/kev/
description: "All 748 vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog since October 2023, newest first, with federal due dates."
type: kev
section: "Security Digest"
date_modified: 2026-10-20
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Known exploited vulnerabilities

- 2026-10-20 [CVE-2026-96656](https://erroneo.us/security/cve/CVE-2026-96656/index.md) Plex Media Server: Plex Media Server External Control of File Name or Path Vulnerability (due 2026-10-23; ransomware: Unknown)
- 2026-10-20 [CVE-2026-96655](https://erroneo.us/security/cve/CVE-2026-96655/index.md) Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability (due 2026-11-03; ransomware: Unknown)
- 2026-10-20 [CVE-2026-96654](https://erroneo.us/security/cve/CVE-2026-96654/index.md) Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability (due 2026-10-23; ransomware: Unknown)
- 2026-10-20 [CVE-2026-96652](https://erroneo.us/security/cve/CVE-2026-96652/index.md) Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability (due 2026-11-03; ransomware: Unknown)
- 2026-10-20 [CVE-2026-110936](https://erroneo.us/security/cve/CVE-2026-110936/index.md) Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerability (due 2026-11-03; ransomware: Unknown)
- 2026-10-20 [CVE-2026-106931](https://erroneo.us/security/cve/CVE-2026-106931/index.md) EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability (due 2026-10-23; ransomware: Unknown)
- 2026-10-16 [CVE-2026-102764](https://erroneo.us/security/cve/CVE-2026-102764/index.md) BeyondTrust Remote Support: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability (due 2026-10-19; ransomware: Unknown)
- 2026-10-16 [CVE-2025-61624](https://erroneo.us/security/cve/CVE-2025-61624/index.md) Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability (due 2026-10-19; ransomware: Unknown)
- 2026-10-15 [CVE-2026-21589](https://erroneo.us/security/cve/CVE-2026-21589/index.md) Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (due 2026-10-18; ransomware: Unknown)
- 2026-10-14 [CVE-2026-76519](https://erroneo.us/security/cve/CVE-2026-76519/index.md) Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerability (due 2026-10-17; ransomware: Unknown)
- 2026-10-14 [CVE-2026-105134](https://erroneo.us/security/cve/CVE-2026-105134/index.md) Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerability (due 2026-10-17; ransomware: Unknown)
- 2026-10-14 [CVE-2026-105133](https://erroneo.us/security/cve/CVE-2026-105133/index.md) Ahsay AhsayCBS: Ahsay AhsayCBS Improper Authentication Vulnerability (due 2026-10-17; ransomware: Unknown)
- 2026-10-14 [CVE-2026-0322](https://erroneo.us/security/cve/CVE-2026-0322/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability (due 2026-10-17; ransomware: Unknown)
- 2026-10-13 [CVE-2026-96951](https://erroneo.us/security/cve/CVE-2026-96951/index.md) Microsoft Windows: Microsoft Windows Command Injection Vulnerability (due 2026-10-16; ransomware: Unknown)
- 2026-10-13 [CVE-2026-104935](https://erroneo.us/security/cve/CVE-2026-104935/index.md) Ivanti Connect Secure: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (due 2026-10-16; ransomware: Unknown)
- 2026-10-08 [CVE-2023-22894](https://erroneo.us/security/cve/CVE-2023-22894/index.md) Strapi Strapi: Strapi Cleartext Storage of Sensitive Information Vulnerability (due 2026-10-11; ransomware: Unknown)
- 2026-10-08 [CVE-2021-3199](https://erroneo.us/security/cve/CVE-2021-3199/index.md) ONLYOFFICE Docs: ONLYOFFICE Docs Server Path Traversal Vulnerability (due 2026-10-11; ransomware: Unknown)
- 2026-10-08 [CVE-2016-3081](https://erroneo.us/security/cve/CVE-2016-3081/index.md) Apache Struts: Apache Struts Command Injection Vulnerability (due 2026-10-11; ransomware: Unknown)
- 2026-10-08 [CVE-2015-5477](https://erroneo.us/security/cve/CVE-2015-5477/index.md) ISC BIND:  ISC BIND Data Processing Errors Vulnerability (due 2026-10-11; ransomware: Unknown)
- 2026-10-08 [CVE-2015-3306](https://erroneo.us/security/cve/CVE-2015-3306/index.md) ProFTPD ProFTPD: ProFTPD Improper Access Control Vulnerability (due 2026-10-11; ransomware: Unknown)
- 2026-10-04 [CVE-2026-88779](https://erroneo.us/security/cve/CVE-2026-88779/index.md) Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (due 2026-10-07; ransomware: Unknown)
- 2026-10-02 [CVE-2026-102490](https://erroneo.us/security/cve/CVE-2026-102490/index.md) Zammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerability (due 2026-10-05; ransomware: Unknown)
- 2026-10-02 [CVE-2026-102489](https://erroneo.us/security/cve/CVE-2026-102489/index.md) Zammad GmbH Zammad: Zammad GmbH Zammad Session Fixation Vulnerability (due 2026-10-05; ransomware: Unknown)
- 2026-10-01 [CVE-2026-104286](https://erroneo.us/security/cve/CVE-2026-104286/index.md) Fortinet FortiMail: Fortinet FortiMail Path Traversal Vulnerability (due 2026-10-04; ransomware: Unknown)
- 2026-09-30 [CVE-2026-76504](https://erroneo.us/security/cve/CVE-2026-76504/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (due 2026-10-03; ransomware: Unknown)
- 2026-09-29 [CVE-2026-86950](https://erroneo.us/security/cve/CVE-2026-86950/index.md) Apple Multiple Products: Apple Multiple Products Out-of-Bounds Write Vulnerability (due 2026-10-13; ransomware: Unknown)
- 2026-09-27 [CVE-2026-88772](https://erroneo.us/security/cve/CVE-2026-88772/index.md) Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (due 2026-09-30; ransomware: Unknown)
- 2026-09-27 [CVE-2026-88771](https://erroneo.us/security/cve/CVE-2026-88771/index.md) Citrix NetScaler: Citrix NetScaler Improper Input Validation Vulnerability (due 2026-09-30; ransomware: Unknown)
- 2026-09-25 [CVE-2026-87902](https://erroneo.us/security/cve/CVE-2026-87902/index.md) WordPress Core: WordPress Core Remote File Inclusion Vulnerability (due 2026-09-28; ransomware: Unknown)
- 2026-09-25 [CVE-2026-67279](https://erroneo.us/security/cve/CVE-2026-67279/index.md) MikroTik RouterOS: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (due 2026-09-28; ransomware: Unknown)
- 2026-09-25 [CVE-2026-65660](https://erroneo.us/security/cve/CVE-2026-65660/index.md) Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability (due 2026-09-28; ransomware: Unknown)
- 2026-09-24 [CVE-2026-71362](https://erroneo.us/security/cve/CVE-2026-71362/index.md) Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability  (due 2026-09-27; ransomware: Unknown)
- 2026-09-24 [CVE-2026-5430](https://erroneo.us/security/cve/CVE-2026-5430/index.md) WSO2 Multiple Products: WSO2 Multiple Products Path Traversal Vulnerability  (due 2026-09-27; ransomware: Unknown)
- 2026-09-22 [CVE-2026-94127](https://erroneo.us/security/cve/CVE-2026-94127/index.md) F5 BIG-IP APM: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-09-22 [CVE-2026-93952](https://erroneo.us/security/cve/CVE-2026-93952/index.md) Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-09-22 [CVE-2026-93616](https://erroneo.us/security/cve/CVE-2026-93616/index.md) Check Point Multiple Products: Check Point Multiple Products Path Traversal Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-09-22 [CVE-2026-85102](https://erroneo.us/security/cve/CVE-2026-85102/index.md) Check Point Multiple Products: Check Point Multiple Products Improper Certificate Validation Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-09-21 [CVE-2026-7273](https://erroneo.us/security/cve/CVE-2026-7273/index.md) Zyxel GS1900 Series Switches: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability (due 2026-09-24; ransomware: Unknown)
- 2026-09-18 [CVE-2026-53266](https://erroneo.us/security/cve/CVE-2026-53266/index.md) Linux Kernel: Linux Kernel Out-of-Bounds Write Vulnerability (due 2026-09-21; ransomware: Unknown)
- 2026-09-18 [CVE-2025-39964](https://erroneo.us/security/cve/CVE-2025-39964/index.md) Linux Kernel: Linux Kernel Race Condition Vulnerability (due 2026-09-21; ransomware: Unknown)
- 2026-09-18 [CVE-2025-39682](https://erroneo.us/security/cve/CVE-2025-39682/index.md) Linux Kernel: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (due 2026-09-21; ransomware: Unknown)
- 2026-09-16 [CVE-2026-87886](https://erroneo.us/security/cve/CVE-2026-87886/index.md) Acronis Backup: Acronis Backup Incorrect Default Permissions Vulnerability (due 2026-09-19; ransomware: Unknown)
- 2026-09-16 [CVE-2026-76460](https://erroneo.us/security/cve/CVE-2026-76460/index.md) Cisco Identity Services Engine: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (due 2026-09-19; ransomware: Unknown)
- 2026-09-16 [CVE-2026-58704](https://erroneo.us/security/cve/CVE-2026-58704/index.md) Google Pixel: Google Pixel Improper Authorization Vulnerability (due 2026-09-19; ransomware: Unknown)
- 2026-09-14 [CVE-2026-76461](https://erroneo.us/security/cve/CVE-2026-76461/index.md) Cisco Secure Email Gateway: Cisco Secure Email Gateway SQL Injection Vulnerability (due 2026-09-17; ransomware: Unknown)
- 2026-09-11 [CVE-2026-85706](https://erroneo.us/security/cve/CVE-2026-85706/index.md) GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability (due 2026-09-14; ransomware: Unknown)
- 2026-09-11 [CVE-2026-84869](https://erroneo.us/security/cve/CVE-2026-84869/index.md) ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability (due 2026-09-14; ransomware: Unknown)
- 2026-09-11 [CVE-2026-42018](https://erroneo.us/security/cve/CVE-2026-42018/index.md) JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-09-11 [CVE-2026-42016](https://erroneo.us/security/cve/CVE-2026-42016/index.md) JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-09-10 [CVE-2026-86060](https://erroneo.us/security/cve/CVE-2026-86060/index.md) MikroTik RouterOS: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability (due 2026-09-13; ransomware: Unknown)
- 2026-09-10 [CVE-2026-67277](https://erroneo.us/security/cve/CVE-2026-67277/index.md) MikroTik RouterOS: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability (due 2026-09-13; ransomware: Unknown)
- 2026-09-09 [CVE-2026-87491](https://erroneo.us/security/cve/CVE-2026-87491/index.md) Google Chromium V8: Google Chromium V8 Out of Bounds Write Vulnerability (due 2026-09-23; ransomware: Unknown)
- 2026-09-09 [CVE-2026-20079](https://erroneo.us/security/cve/CVE-2026-20079/index.md) Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2026-09-12; ransomware: Unknown)
- 2026-09-09 [CVE-2026-19490](https://erroneo.us/security/cve/CVE-2026-19490/index.md) Citrix NetScaler: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2026-09-12; ransomware: Unknown)
- 2026-09-09 [CVE-2025-25249](https://erroneo.us/security/cve/CVE-2025-25249/index.md) Fortinet Multiple Products: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability (due 2026-09-12; ransomware: Unknown)
- 2026-09-08 [CVE-2026-86218](https://erroneo.us/security/cve/CVE-2026-86218/index.md) N-able N-central: N-able N-central Static Code Injection Vulnerability (due 2026-09-11; ransomware: Unknown)
- 2026-09-08 [CVE-2026-85880](https://erroneo.us/security/cve/CVE-2026-85880/index.md) Microsoft Windows: Microsoft Windows Heap-Based Buffer Overflow Vulnerability (due 2026-09-22; ransomware: Unknown)
- 2026-09-08 [CVE-2026-81963](https://erroneo.us/security/cve/CVE-2026-81963/index.md) Microsoft Windows: Microsoft Windows Link Following Vulnerability (due 2026-09-22; ransomware: Unknown)
- 2026-09-08 [CVE-2026-75650](https://erroneo.us/security/cve/CVE-2026-75650/index.md) Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (due 2026-09-11; ransomware: Unknown)
- 2026-09-04 [CVE-2026-85046](https://erroneo.us/security/cve/CVE-2026-85046/index.md) Google Chromium V8: Google Chromium V8 Type Confusion Vulnerability (due 2026-09-18; ransomware: Unknown)
- 2026-09-02 [CVE-2026-9586](https://erroneo.us/security/cve/CVE-2026-9586/index.md) Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-09-02 [CVE-2026-83549](https://erroneo.us/security/cve/CVE-2026-83549/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances OS Command Injection Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-09-02 [CVE-2026-83548](https://erroneo.us/security/cve/CVE-2026-83548/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-09-02 [CVE-2026-82329](https://erroneo.us/security/cve/CVE-2026-82329/index.md) JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-09-02 [CVE-2026-59822](https://erroneo.us/security/cve/CVE-2026-59822/index.md) BerriAI LiteLLM: BerriAI LiteLLM Improper Authentication Vulnerability (due 2026-09-16; ransomware: Unknown)
- 2026-09-02 [CVE-2026-49869](https://erroneo.us/security/cve/CVE-2026-49869/index.md) Kestra Kestra OSS: Kestra OSS OS Command Injection Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-09-02 [CVE-2026-48710](https://erroneo.us/security/cve/CVE-2026-48710/index.md) Kludex Starlette: Kludex Starlette HTTP Request/Response Smuggling Vulnerability (due 2026-09-16; ransomware: Unknown)
- 2026-08-31 [CVE-2026-82078](https://erroneo.us/security/cve/CVE-2026-82078/index.md) PaperCut NG/MF: PaperCut NG/MF Unsafe Reflection Vulnerability (due 2026-09-14; ransomware: Unknown)
- 2026-08-31 [CVE-2026-81578](https://erroneo.us/security/cve/CVE-2026-81578/index.md) PaperCut NG/MF: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability (due 2026-09-14; ransomware: Unknown)
- 2026-08-27 [CVE-2026-66384](https://erroneo.us/security/cve/CVE-2026-66384/index.md) JFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability (due 2026-09-10; ransomware: Unknown)
- 2026-08-27 [CVE-2026-53362](https://erroneo.us/security/cve/CVE-2026-53362/index.md) Linux Kernel: Linux Kernel Unspecified Vulnerability (due 2026-08-30; ransomware: Unknown)
- 2026-08-27 [CVE-2023-49105](https://erroneo.us/security/cve/CVE-2023-49105/index.md) ownCloud ownCloud: ownCloud Improper Authentication Vulnerability (due 2026-08-30; ransomware: Unknown)
- 2026-08-26 [CVE-2026-8452](https://erroneo.us/security/cve/CVE-2026-8452/index.md) Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (due 2026-08-29; ransomware: Unknown)
- 2026-08-26 [CVE-2022-0995](https://erroneo.us/security/cve/CVE-2022-0995/index.md) Linux Kernel: Linux Kernel Out-of-Bounds Write Vulnerability (due 2026-08-29; ransomware: Unknown)
- 2026-08-26 [CVE-2021-23758](https://erroneo.us/security/cve/CVE-2021-23758/index.md) Ajax.NET Professional Ajax.NET Professional: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability (due 2026-09-09; ransomware: Unknown)
- 2026-08-26 [CVE-2019-1068](https://erroneo.us/security/cve/CVE-2019-1068/index.md) Microsoft SQL Server: Microsoft SQL Server Remote Code Execution Vulnerability (due 2026-08-29; ransomware: Unknown)
- 2026-08-26 [CVE-2015-5287](https://erroneo.us/security/cve/CVE-2015-5287/index.md) Red Hat Automatic Bug Reporting Tool: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability (due 2026-09-09; ransomware: Unknown)
- 2026-08-26 [CVE-2015-3246](https://erroneo.us/security/cve/CVE-2015-3246/index.md) Red Hat Libuser: Red Hat Libuser Race Condition Vulnerability (due 2026-09-09; ransomware: Unknown)
- 2026-08-25 [CVE-2026-60004](https://erroneo.us/security/cve/CVE-2026-60004/index.md) Gitea Gitea: Gitea Code Injection Vulnerability (due 2026-08-28; ransomware: Unknown)
- 2026-08-24 [CVE-2026-21962](https://erroneo.us/security/cve/CVE-2026-21962/index.md) Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (due 2026-08-27; ransomware: Unknown)
- 2026-08-21 [CVE-2026-73570](https://erroneo.us/security/cve/CVE-2026-73570/index.md) Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (due 2026-08-24; ransomware: Unknown)
- 2026-08-20 [CVE-2026-72530](https://erroneo.us/security/cve/CVE-2026-72530/index.md) TrueConf Server: TrueConf Server Code Injection Vulnerability (due 2026-09-03; ransomware: Unknown)
- 2026-08-20 [CVE-2026-72529](https://erroneo.us/security/cve/CVE-2026-72529/index.md) TrueConf Server: TrueConf Server Missing Authentication for Critical Function Vulnerability (due 2026-08-23; ransomware: Unknown)
- 2026-08-19 [CVE-2026-64849](https://erroneo.us/security/cve/CVE-2026-64849/index.md) MLflow MLflow: MLflow Server-Side Request Forgery Vulnerability (due 2026-09-02; ransomware: Unknown)
- 2026-08-18 [CVE-2026-65400](https://erroneo.us/security/cve/CVE-2026-65400/index.md) Apple macOS: Apple macOS Improper Authentication Vulnerability (due 2026-08-21; ransomware: Unknown)
- 2026-08-18 [CVE-2026-59310](https://erroneo.us/security/cve/CVE-2026-59310/index.md) Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability (due 2026-08-21; ransomware: Known)
- 2026-08-18 [CVE-2026-55040](https://erroneo.us/security/cve/CVE-2026-55040/index.md) Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability (due 2026-08-21; ransomware: Unknown)
- 2026-08-18 [CVE-2026-33824](https://erroneo.us/security/cve/CVE-2026-33824/index.md) Microsoft Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (due 2026-08-21; ransomware: Unknown)
- 2026-08-17 [CVE-2025-62593](https://erroneo.us/security/cve/CVE-2025-62593/index.md) Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability (due 2026-08-20; ransomware: Unknown)
- 2026-08-11 [CVE-2026-72898](https://erroneo.us/security/cve/CVE-2026-72898/index.md) Metabase Metabase: Metabase SQL Injection Vulnerability (due 2026-08-14; ransomware: Unknown)
- 2026-08-11 [CVE-2026-68820](https://erroneo.us/security/cve/CVE-2026-68820/index.md) Microsoft Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (due 2026-08-25; ransomware: Unknown)
- 2026-08-11 [CVE-2026-20349](https://erroneo.us/security/cve/CVE-2026-20349/index.md) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) : Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (due 2026-08-14; ransomware: Unknown)
- 2026-08-07 [CVE-2026-8037](https://erroneo.us/security/cve/CVE-2026-8037/index.md) Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability (due 2026-08-10; ransomware: Unknown)
- 2026-08-05 [CVE-2026-63077](https://erroneo.us/security/cve/CVE-2026-63077/index.md) JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (due 2026-08-08; ransomware: Known)
- 2026-08-04 [CVE-2026-9198](https://erroneo.us/security/cve/CVE-2026-9198/index.md) IBM Langflow: IBM Langflow Code Injection Vulnerability (due 2026-08-07; ransomware: Unknown)
- 2026-08-04 [CVE-2026-34486](https://erroneo.us/security/cve/CVE-2026-34486/index.md) Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (due 2026-08-07; ransomware: Unknown)
- 2026-08-04 [CVE-2026-18556](https://erroneo.us/security/cve/CVE-2026-18556/index.md) N-able N-central: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2026-08-07; ransomware: Unknown)
- 2026-08-03 [CVE-2026-18577](https://erroneo.us/security/cve/CVE-2026-18577/index.md) N-able N-central: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2026-08-06; ransomware: Unknown)
- 2026-07-29 [CVE-2026-20316](https://erroneo.us/security/cve/CVE-2026-20316/index.md) Cisco Secure Firewall Management Center (FMC): Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (due 2026-08-01; ransomware: Known)
- 2026-07-27 [CVE-2026-16812](https://erroneo.us/security/cve/CVE-2026-16812/index.md) Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability (due 2026-07-30; ransomware: Unknown)

Pages: https://erroneo.us/security/kev/index.md · https://erroneo.us/security/kev/2/index.md · https://erroneo.us/security/kev/3/index.md · https://erroneo.us/security/kev/4/index.md · https://erroneo.us/security/kev/5/index.md · https://erroneo.us/security/kev/6/index.md · https://erroneo.us/security/kev/7/index.md · https://erroneo.us/security/kev/8/index.md

---
Source page: https://erroneo.us/security/kev/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt