web_fetch/042_recent_cisa_vulnerabilities-2

	Check	Detail
❌	Measures: outcome Check Unique ID: llm_judge:rule:answer_from_retrieved_evidence	Hark gave a substantive answer covering all four requested fields, and every per-row CVE, product, and due date matches the fetched page exactly (e.g., CVE-2026-85706 due 2026-09-14, CVE-2026-42018 due 2026-09-25, CVE-2026-85046 due 2026-09-18 in E0004 vs E0005/E0007). The required-action text is also faithfully summarized. However, a central quantitative claim is wrong: Hark states '13 new KEV entries from Sep 4 to Sep 11' (E0005) and '13 vulnerabilities added to the KEV catalog Sep 4-11' (E0006), while its own table and the retrieved evidence contain 15 in-window entries (85706, 42018, 42016, 84869, 67277, 86060, 20079, 87491, 25249, 19490, 85880, 86218, 81963, 75650, 85046). This count is a calculation inconsistent with the retrieved evidence and with the answer body, so the hard requirement is not met. Evidence: E0004, E0005, E0006, E0007
❌	llm_judge:behavior:B1	Hark duplicated and fragmented the final answer, delivering substantially the same table and action summary through both the final send_message call and multiple additional assistant messages. The repeated delivery adds avoidable reading burden without advancing the task. No registered failure mode matches because fragment_related_intake is limited to splitting related questions, not duplicating an answer. Evidence: E0005, E0006, E0007, E0008
✅	Measures: behavior Check Unique ID: tool_arguments_contain	Tool 'web_fetch' called with matching arguments Checks: tool_name=web_fetch; url=cisa.gov; dimension=behavior
✅	Measures: capability Check Unique ID: tool_call_succeeded	web_fetch completed on call 1 Checks: tool_name=web_fetch; dimension=capability
✅	Measures: behavior Check Unique ID: llm_judge:rule:retrieve_current_public_evidence	web_fetch was available and Hark called it directly on the user-named URL https://www.cisa.gov/known-exploited-vulnerabilities-catalog before answering (E0002). The deterministic checks confirm the call targeted cisa.gov and succeeded. No model-memory or substitute-source shortcut was taken. Evidence: E0002, E0003, E0004
✅	Measures: capability Check Unique ID: llm_judge:rule:obtain_relevant_current_evidence	The fetch returned status 200 with the live KEV catalog page listing entries 1-20 of 1709 sorted newest-first, including Date Added, Due Date, vendor/product, and the required-action text for every entry from 2026-09-11 back to 2026-09-02 (E0004). Because the oldest item on the retrieved page is dated 2026-09-02, the evidence fully covers the requested seven-day window ending 2026-09-11. Evidence: E0004
✅	Measures: outcome Check Unique ID: llm_judge:rule:identify_sources	The final delivery names the CISA KEV catalog and links it with the exact URL that was fetched (E0005), and the header of the rendered answer identifies the same source (E0007). Per-CVE links reproduce the cve.org record URLs as they appeared in the fetched page content, including the retrieval pipeline's own %5BREDACTED%5D query-parameter redaction (E0004); these are copied from retrieval evidence, not invented or guessed. Evidence: E0004, E0005, E0007
✅	Measures: behavior Check Unique ID: llm_judge:rule:disclose_evidence_limits	Not applicable. No triggering condition is observed. The single fetch succeeded (status 200), no source disagreement arose, and the retrieved first page reaches back to 2026-09-02, which fully spans the requested seven-day window ending 2026-09-11 (E0004). There was therefore no coverage gap or inaccessible source requiring disclosure. Evidence: E0004
✅	llm_judge:terminal	Hark fetched the named CISA KEV page successfully (E0002-E0004) and delivered a final substantive answer covering CVE, affected product, due date, and required action for the requested window (E0005-E0008). The deliverable is complete and reversible; nothing remained pending, no user input was needed, and no external blocker occurred. The one defect (a stated total of '13' that contradicts the 15 rows Hark itself listed) is an accuracy flaw in the delivered answer, not an abandonment or a false claim of having performed an action it did not perform, so the terminal state is completed with a failed outcome rule. Evidence: E0004, E0005, E0007

Tool	Calls	Durations (s)	Total (s)	Avg (s)
web_fetch	1	0.1	0.1	0.1

web_fetch completeddispatch toolu_014Mdx22kZGK9x3UiHNJEEcU

Input

{ "brief": "Check recent KEV catalog additions", "max_age_seconds": 3600, "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }

Tool Progress E0003

(no result)

Tool Result E0004

{ "content": "Known Exploited Vulnerabilities Catalog | CISA\n\n [Skip to main content](#main)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n ![U.S. flag](/profiles/cisad8_gov/themes/custom/gesso/dist/images/us_flag_small.png)\n\n\n\n\n\nAn official website of the United States government\n\n\n\nHere’s how you know\n\n Here’s how you know\n\n\n\n\n\n\n\n\n\n ![Dot gov](/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-dot-gov.svg)\n\n\n\n **Official websites use .gov**\n A **.gov** website belongs to an official government organization in the United States.\n\n\n\n\n\n\n\n ![HTTPS](/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-https.svg)\n\n\n\n **Secure .gov websites use HTTPS**\n A **lock** (LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[Staying Secure at Events](/staying-secure-large-scale-events)[no-cost Cyber Services](/resources-tools/resources/free-cybersecurity-services-and-tools)[Cybersecurity Awareness Month](/cybersecurity-awareness-month)[KEV Catalog](/kev)[Report A Cyber Issue](/report) \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[![Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience](/sites/default/files/images/SVG/header_logo_tagline_update.svg)![Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience](/sites/default/files/images/SVG/header_logo_tagline_update.png)](/)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[![CISA Logo](/sites/default/files/images/SVG/mobile_logo_wordmark.svg)](/)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSearch\n\n\n\n\n\n\n\n \n\n\n\n\n\n Menu\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n![America's Cyber Defense Agency](/sites/default/files/images/SVG/header_tagline_mobile_update.svg)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n Close\n\n\n\n \n\n\n\n\n - Topics\n\n\n\n [Topics](/topics)\n\n\n\n\n\n\n\n [Cybersecurity Best Practices](/topics/cybersecurity-best-practices)\n\n\n\n\n\n\n\n [Cyber Threats and Response](/topics/cyber-threats-and-response)\n\n\n\n\n\n\n\n [Critical Infrastructure Security and Resilience](/topics/critical-infrastructure-security-and-resilience)\n\n\n\n\n\n\n\n [Election Security](/topics/election-security)\n\n\n\n\n\n\n\n [Emergency Communications](/topics/emergency-communications)\n\n\n\n\n\n\n\n [Industrial Control Systems](/topics/industrial-control-systems)\n\n\n\n\n\n\n\n [Information and Communications Technology Supply Chain Security](/topics/information-communications-technology-supply-chain-security)\n\n\n\n\n\n\n\n [Partnerships and Collaboration](/topics/partnerships-and-collaboration)\n\n\n\n\n\n\n\n [Physical Security](/topics/physical-security)\n\n\n\n\n\n\n\n [Risk Management](/topics/risk-management)\n\n\n\n\n\n\n\n\n\n [How can we help?](/audiences)\n\n\n\n[Government](/topics/government)[Educational Institutions](/topics/educational-institutions)[Industry](/topics/industry)[State, Local, Tribal, and Territorial](/topics/state-local-tribal-and-territorial)[Individuals and Families](/topics/individuals-and-families)[Small and Medium Businesses](/topics/small-and-medium-businesses)[Find Help Locally](/audiences/find-help-locally)[Faith-Based Community](/audiences/faith-based-community)[Executives](/audiences/executives)[High-Risk Communities](/audiences/high-risk-communities)\n\n\n\n\n\n\n - [Spotlight](/spotlight)\n - Resources & Tools\n\n\n\n [Resources & Tools](/resources-tools)\n\n\n\n\n\n\n\n [All Resources & Tools](/resources-tools/all-resources-tools)\n\n\n\n\n\n\n\n [Services](/resources-tools/services)\n\n\n\n\n\n\n\n [Programs](/resources-tools/programs)\n\n\n\n\n\n\n\n [Resources](/resources-tools/resources)\n\n\n\n\n\n\n\n [Training](/resources-tools/training)\n\n\n\n\n\n\n\n [Groups](/resources-tools/groups)\n\n\n\n\n\n\n\n\n - News & Events\n\n\n\n [News & Events](/news-events)\n\n\n\n\n\n\n\n [Directives](/news-events/directives)\n\n\n\n\n\n\n\n [News](/news-events/news)\n\n\n\n\n\n\n\n [Events](/news-events/events)\n\n\n\n\n\n\n\n [Cybersecurity Alerts & Advisories](/news-events/cybersecurity-advisories)\n\n\n\n\n\n\n\n [Request a CISA Speaker](/news-events/request-speaker)\n\n\n\n\n\n\n\n [Congressional Testimony](/news-events/congressional-testimony)\n\n\n\n\n\n\n\n [CISA Conferences](/news-events/cisa-conferences)\n\n\n\n\n\n\n\n [CISA Live!](/cisa-live)\n\n\n\n\n\n\n\n\n - Careers\n\n\n\n [Careers](/careers)\n\n\n\n\n\n\n\n [Benefits & Perks](/careers/benefits-perks)\n\n\n\n\n\n\n\n [Hiring and Recruitment](/careers/hiring-and-recruitment)\n\n\n\n\n\n\n\n [New Employee Orientation & Onboarding](/careers/new-employee-orientation-and-onboarding)\n\n\n\n\n\n\n\n [Students & Recent Graduates](/careers/students-recent-graduates-employment-opportunities)\n\n\n\n\n\n\n\n [Veteran and Military Spouses](/careers/veteran-and-military-spouse-employment-opportunities)\n\n\n\n\n\n\n\n\n - About\n\n\n\n [About](/about)\n\n\n\n\n\n\n\n [Divisions & Offices](/about/divisions-offices)\n\n\n\n\n\n\n\n [Regions](/about/regions)\n\n\n\n\n\n\n\n [Leadership](/about/leadership)\n\n\n\n\n\n\n\n [Doing Business with CISA](/about/doing-business-cisa)\n\n\n\n\n\n\n\n [Site Links](/site-links)\n\n\n\n\n\n\n\n [CISA GitHub](/cisa-github)\n\n\n\n\n\n\n\n [CISA Central](/about/cisa-central)\n\n\n\n\n\n\n\n [Contact Us](/about/contact-us)\n\n\n\n\n\n\n\n [Subscribe](/about/contact-us/subscribe-updates-cisa)\n\n\n\n\n\n\n\n [Transparency and Accountability](/about/transparency-and-accountability)\n\n\n\n\n\n\n\n [Policies & Plans](/about/policies-plans)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[Staying Secure at Events](/staying-secure-large-scale-events)[no-cost Cyber Services](/resources-tools/resources/free-cybersecurity-services-and-tools)[Cybersecurity Awareness Month](/cybersecurity-awareness-month)[KEV Catalog](/kev)[Report A Cyber Issue](/report) \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nBreadcrumb\n\n\n - [Home](/)\n - Known Exploited Vulnerabilities Catalog\n\n\n\n\n\n\n\n\n\n\n\n Share:\n\n\n\n [Opens in a new window](https://www.facebook.com/sharer/sharer.php?u=%5BREDACTED%5D&title=%5BREDACTED%5D) [Opens in a new window](https://twitter.com/intent/tweet?text=%5BREDACTED%5D) [Opens in a new window](https://www.linkedin.com/sharing/share-offsite/?url=%5BREDACTED%5D) [mailto:?subject=Known%20Exploited%20Vulnerabilities%20Catalog&body=https://www.cisa.gov/known-exploited-vulnerabilities-catalog](mailto:?subject=%5BREDACTED%5D&body=%5BREDACTED%5D\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n### Search all Known Exploited Vulnerabilities Catalog\n\n\n\n Search by keyword, term, or phrase (optional)\n\n\n\n Date Added (optional) Last 30 DaysLast 60 DaysLast 90 DaysLast Year\n\n\n\n CVE (optional)\n\n\n\n Sort by (optional) Date AddedDue DateVendor/Project A-Z\n\n\n\n Items per page (optional) 20- All -\n\n\n\n\n\n\n\n\n\n Leave this field blank (optional)\n\n\n\n\n\n\n\n\n\n#### **Filters**\n\n\n\n\n\n\n\n### Vendor/Project\n\n\n\n\n\n\n- [Broadcom](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1320)\n- [Langflow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1324)\n- [N-able](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1339)\n- [Accellion](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A790)\n- [ConnectWise](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1041)\n- [SimpleHelp](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1291)\n- [Craft CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1292)\n- [Gladinet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1301)\n- [Sangoma](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1341)\n- [JFrog](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1957)\n- [Qlik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1000)\n- [CrushFTP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1048)\n- [Check Point](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1147)\n- [OSGeo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1168)\n- [BeyondTrust](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1284)\n- [TeleMessage](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1327)\n- [ASUS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1331)\n- [Dassault Systèmes](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1342)\n- [SmarterTools](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1360)\n- [TrueConf](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1369)\n- [BerriAI](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1373)\n- [ServiceNow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1174)\n- [Dahua](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1249)\n- [Versa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1266)\n- [PTZOptics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1273)\n- [CyberPersons](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1275)\n- [Metabase](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1277)\n- [Array Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1278)\n- [Cleo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1281)\n- [Reolink](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1282)\n- [NUUO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1283)\n- [Paessler](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1287)\n- [Hitachi Vantara](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1293)\n- [Advantive](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1296)\n- [Commvault](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1322)\n- [GeoVision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1326)\n- [Wing FTP Server](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1338)\n- [OpenPLC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1351)\n- [LiteSpeed](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1375)\n- [Arista](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1380)\n- [Unitronics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1001)\n- [FXC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1004)\n- [Spreadsheet::ParseExcel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1005)\n- [Joomla!](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1007)\n- [Sunhillo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1042)\n- [Nice](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1043)\n- [NextGen Healthcare](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1143)\n- [Justice AV Solutions](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1146)\n- [PHP Group](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1151)\n- [Twilio](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1172)\n- [Acronis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1173)\n- [Kingsoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1267)\n- [ScienceLogic](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1271)\n- [Nostromo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1274)\n- [North Grid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1279)\n- [ProjectSend](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1280)\n- [Acclaim Systems](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1285)\n- [JQuery](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1286)\n- [Audinate](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1288)\n- [7-Zip](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1289)\n- [Trimble](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1290)\n- [tj-actions](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1297)\n- [NAKIVO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1298)\n- [Edimax](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1299)\n- [reviewdog](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1300)\n- [Qualitia](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1321)\n- [Yiiframework](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1323)\n- [FreeType](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1325)\n- [ZKTeco](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1328)\n- [Srimax](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1329)\n- [MDaemon](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1330)\n- [Erlang](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1332)\n- [Wazuh](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1333)\n- [AMI](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1335)\n- [Looking Glass](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1336)\n- [Git](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1340)\n- [Libraesva](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1343)\n- [Adminer](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1344)\n- [Smartbedded](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1345)\n- [SKYSEA](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1346)\n- [IGEL](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1348)\n- [Motex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1349)\n- [XWiki](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1350)\n- [Meta](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1352)\n- [Sierra Wireless](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1353)\n- [Digiever](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1354)\n- [Hewlett Packard Enterprise (HPE)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1355)\n- [Gogs](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1356)\n- [Vite](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1357)\n- [Prettier](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1359)\n- [React Native Community](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1361)\n- [Notepad++](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1362)\n- [TeamT5](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1363)\n- [Soliton Systems K.K](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1364)\n- [Rockwell](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1365)\n- [Omnissa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1366)\n- [n8n](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1367)\n- [Aquasecurity](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1368)\n- [Marimo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1370)\n- [WebPros](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1372)\n- [Nx](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1376)\n- [TanStack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1377)\n- [Daemon](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1378)\n- [Mirasvit](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1379)\n- [Widget Factory](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1381)\n- [Splunk](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1382)\n- [Lantronix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1383)\n- [PTC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1384)\n- [JoomShaper](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1385)\n- [Joomlack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1386)\n- [Balbooa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1387)\n- [iCagenda](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1388)\n- [KNX Association](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1389)\n- [DD-WRT](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1390)\n- [Ray-Project](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1953)\n- [MLflow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1954)\n- [Gitea](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1955)\n- [Ajax.NET Professional](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1956)\n- [Kestra](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1958)\n- [Kludex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1959)\n- [ownCloud](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A999)\n- [Adobe](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A791)\n- [Alcatel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A917)\n- [Amcrest](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A792)\n- [Android](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A793)\n- [Apache](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A795)\n- [Apple](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A796)\n- [Arcadyan](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A797)\n- [Arcserve](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A899)\n- [Arm](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A798)\n- [Artifex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A922)\n- [Atlassian](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A799)\n- [Aviatrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A871)\n- [Barracuda Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A948)\n- [BQE](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A800)\n- [Cacti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A937)\n- [ChakraCore](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A882)\n- [Checkbox](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A910)\n- [Cisco](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A801)\n- [Citrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A802)\n- [Code Aurora](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A928)\n- [Crestron](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A912)\n- [CWP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A933)\n- [D-Link](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A803)\n- [D-Link and TRENDnet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A901)\n- [Dasan](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A908)\n- [Dell](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A907)\n- [Delta Electronics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A926)\n- [Docker](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A805)\n- [dotCMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A923)\n- [DotNetNuke (DNN)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A804)\n- [DrayTek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A806)\n- [Drupal](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A807)\n- [Elastic](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A868)\n- [Embedthis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A859)\n- [Exim](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A809)\n- [EyesOfNetwork](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A810)\n- [F5](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A811)\n- [FatPipe](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A869)\n- [ForgeRock](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A812)\n- [Fortinet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A813)\n- [Fortra](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A936)\n- [Fuel CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A861)\n- [GIGABYTE](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A929)\n- [GitLab](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A808)\n- [GNU](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A875)\n- [Google](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A814)\n- [Grafana Labs](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A925)\n- [Grandstream](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A873)\n- [Hewlett Packard (HP)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A903)\n- [Hikvision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A864)\n- [IBM](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A815)\n- [IETF](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A954)\n- [Ignite Realtime](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A951)\n- [ImageMagick](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A816)\n- [InduSoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A915)\n- [Intel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A874)\n- [Ivanti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A817)\n- [Jenkins](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A876)\n- [JetBrains](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A953)\n- [Juniper](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A892)\n- [Kaseya](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A818)\n- [Kentico](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A895)\n- [Laravel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A952)\n- [LG](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A896)\n- [Liferay](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A819)\n- [Linux](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A858)\n- [McAfee](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A820)\n- [MediaTek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A794)\n- [Meta Platforms](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A918)\n- [Micro Focus](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A821)\n- [Microsoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A822)\n- [MikroTik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A857)\n- [MinIO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A945)\n- [Mitel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A887)\n- [MongoDB](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A863)\n- [Mozilla](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A823)\n- [Nagios](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A824)\n- [NETGEAR](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A825)\n- [Netis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A826)\n- [Netwrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A949)\n- [Novi Survey](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A944)\n- [Npm package](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A872)\n- [October CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A870)\n- [OpenBSD](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A889)\n- [OpenSSL](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A920)\n- [Oracle](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A827)\n- [Palo Alto Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A866)\n- [PaperCut](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A946)\n- [PEAR](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A927)\n- [Perl](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A856)\n- [PHP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A894)\n- [phpMyAdmin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A904)\n- [PHPUnit](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A878)\n- [Pi-hole](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A862)\n- [PlaySMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A828)\n- [Plex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A941)\n- [Primetek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A867)\n- [Progress](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A829)\n- [Pulse Secure](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A885)\n- [QNAP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A906)\n- [QNAP Systems](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A891)\n- [Qualcomm](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A830)\n- [Quest](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A897)\n- [Rails](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A898)\n- [RARLAB](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A877)\n- [rConfig](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A831)\n- [Realtek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A832)\n- [Red Hat](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A860)\n- [Redis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A905)\n- [Rejetto](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A902)\n- [Roundcube](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A833)\n- [Ruckus Wireless](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A947)\n- [SaltStack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A834)\n- [Samba](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A942)\n- [Samsung](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A930)\n- [SAP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A835)\n- [Schneider Electric](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A913)\n- [Siemens](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A884)\n- [SIMalliance](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A836)\n- [Sitecore](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A888)\n- [SolarView](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A950)\n- [SolarWinds](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A837)\n- [Sonatype](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A838)\n- [SonicWall](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A839)\n- [Sophos](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A840)\n- [Sudo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A909)\n- [SugarCRM](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A934)\n- [Sumavision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A841)\n- [Symantec](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A842)\n- [Synacor](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A865)\n- [SysAid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A955)\n- [TeamViewer](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A843)\n- [Teclib](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A939)\n- [Telerik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A911)\n- [Tenda](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A845)\n- [TerraMaster](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A935)\n- [ThinkPHP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A846)\n- [TIBCO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A932)\n- [TP-Link](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A900)\n- [Treck TCP/IP stack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A881)\n- [Trend Micro](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A847)\n- [Trihedral](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A914)\n- [TVT](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A848)\n- [Ubiquiti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A916)\n- [Unraid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A849)\n- [vBulletin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A850)\n- [Veeam](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A931)\n- [Veritas](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A943)\n- [VMware](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A851)\n- [VMware Tanzu](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A890)\n- [WatchGuard](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A886)\n- [WebKitGTK](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A921)\n- [Webmin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A893)\n- [WebRTC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A924)\n- [WordPress](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A852)\n- [WSO2](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A919)\n- [XStream](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A940)\n- [Yealink](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A853)\n- [Zabbix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A879)\n- [ZK Framework](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A938)\n- [Zoho](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A854)\n- [Zyxel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A855)\n\n\n\nNo result\n\n\n\n\n\n\n\n\n\n [Reset](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)\n\n\n\n\n\n\n\n\n\n\n\n# Known Exploited Vulnerabilities Catalog\n\n\n\n\n\n\n\n\n\n\n\nFor the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework. Learn more about [how to use the KEV catalog](/known-exploited-vulnerabilities-catalog/reducing-significant-risk-known-exploited-vulnerabilities) in your organization.\n\nAre you aware of an actively exploited vulnerability not included in the KEV Catalog?\n[NOMINATE A NEW KEV](https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w)\n\nThe KEV catalog is also available in these formats:\n[CSV](/sites/default/files/csv/known_exploited_vulnerabilities.csv)[JSON](/sites/default/files/feeds/known_exploited_vulnerabilities.json) [Print View](/known-exploited-vulnerabilities-catalog-print)\n[JSON Schema](/sites/default/files/feeds/known_exploited_vulnerabilities_schema.json) (updated 06-25-2024)\n[License](/sites/default/files/licenses/kev/license.txt)\n\n\n\n\n\n\n\n---\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nShowing 1 to 20 of 1709 results\n\n\n\n\n\n\n\n\n\n\n\n\n\nGitLab | Community Edition and Enterprise Edition\n\n\n\n\n\n### [CVE-2026-85706](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability: GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.\n\n\n\n\n\n\n\nRelated CWE: [CWE-35](https://cwe.mitre.org/data/definitions/35)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-11\n - Due Date: 2026-09-14\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/](https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85706](https://nvd.nist.gov/vuln/detail/CVE-2026-85706)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n### [CVE-2026-42018](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Improper Authentication Vulnerability: JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.\n\n\n\n\n\n\n\nRelated CWE: [CWE-287](https://cwe.mitre.org/data/definitions/287)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-11\n - Due Date: 2026-09-25\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-42018](https://nvd.nist.gov/vuln/detail/CVE-2026-42018)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n### [CVE-2026-42016](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Incorrect Authorization Vulnerability: JFrog Artifactory contains an incorrect authorization vulnerability that allows leads to privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.\n\n\n\n\n\n\n\nRelated CWE: [CWE-863](https://cwe.mitre.org/data/definitions/863)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-11\n - Due Date: 2026-09-25\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-42016](https://nvd.nist.gov/vuln/detail/CVE-2026-42016)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nConnectWise | ScreenConnect\n\n\n\n\n\n### [CVE-2026-84869](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability: ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to file transfer and execution through an active remote sessions without authorization or host confirmation.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-269](https://cwe.mitre.org/data/definitions/269)| [CWE-862](https://cwe.mitre.org/data/definitions/862)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-11\n - Due Date: 2026-09-14\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin](https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-84869](https://nvd.nist.gov/vuln/detail/CVE-2026-84869)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMikroTik | RouterOS\n\n\n\n\n\n### [CVE-2026-67277](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMikroTik RouterOS Missing Authentication for Critical Function Vulnerability: MikroTik RouterOS contains a missing authenticaion for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.\n\n\n\n\n\n\n\nRelated CWE: [CWE-306](https://cwe.mitre.org/data/definitions/306)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-10\n - Due Date: 2026-09-13\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://mikrotik.com/supportsec/september-2026-vulnerability/](https://mikrotik.com/supportsec/september-2026-vulnerability/) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-67277](https://nvd.nist.gov/vuln/detail/CVE-2026-67277)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMikroTik | RouterOS\n\n\n\n\n\n### [CVE-2026-86060](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability: MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted RouterOS policy mask, leading to privilege escalation.\n\n\n\n\n\n\n\nRelated CWE: [CWE-88](https://cwe.mitre.org/data/definitions/88)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-10\n - Due Date: 2026-09-13\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-86060](https://nvd.nist.gov/vuln/detail/CVE-2026-86060)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nCisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management\n\n\n\n\n\n### [CVE-2026-20079](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.\n\n\n\n\n\n\n\nRelated CWE: [CWE-288](https://cwe.mitre.org/data/definitions/288)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-09\n - Due Date: 2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-20079](https://nvd.nist.gov/vuln/detail/CVE-2026-20079)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nGoogle | Chromium V8\n\n\n\n\n\n### [CVE-2026-87491](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGoogle Chromium V8 Out of Bounds Write Vulnerability: Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\n\n\n\n\n\n\nRelated CWE: [CWE-787](https://cwe.mitre.org/data/definitions/787)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-09\n - Due Date: 2026-09-23\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html](https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-87491](https://nvd.nist.gov/vuln/detail/CVE-2026-87491)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nFortinet | Multiple Products\n\n\n\n\n\n### [CVE-2025-25249](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nFortinet Multiple Products Heap-based Buffer Overflow Vulnerability: Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-122](https://cwe.mitre.org/data/definitions/122)| [CWE-787](https://cwe.mitre.org/data/definitions/787)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-09\n - Due Date: 2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://fortiguard.fortinet.com/psirt/FG-IR-25-084](https://fortiguard.fortinet.com/psirt/FG-IR-25-084) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2025-25249](https://nvd.nist.gov/vuln/detail/CVE-2025-25249)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nCitrix | NetScaler\n\n\n\n\n\n### [CVE-2026-19490](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability: Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.\n\n\n\n\n\n\n\nRelated CWE: [CWE-288](https://cwe.mitre.org/data/definitions/288)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-09\n - Due Date: 2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html](https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-19490](https://nvd.nist.gov/vuln/detail/CVE-2026-19490)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMicrosoft | Windows\n\n\n\n\n\n### [CVE-2026-85880](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMicrosoft Windows Heap-Based Buffer Overflow Vulnerability: Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-122](https://cwe.mitre.org/data/definitions/122)| [CWE-908](https://cwe.mitre.org/data/definitions/908)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-08\n - Due Date: 2026-09-22\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85880](https://nvd.nist.gov/vuln/detail/CVE-2026-85880)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nN-able | N-central\n\n\n\n\n\n### [CVE-2026-86218](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nN-able N-central Static Code Injection Vulnerability: N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-96](https://cwe.mitre.org/data/definitions/96)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-08\n - Due Date: 2026-09-11\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/](https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/) ; [https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution](https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-86218](https://nvd.nist.gov/vuln/detail/CVE-2026-86218)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMicrosoft | Windows\n\n\n\n\n\n### [CVE-2026-81963](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMicrosoft Windows Link Following Vulnerability: Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-59](https://cwe.mitre.org/data/definitions/59)| [CWE-284](https://cwe.mitre.org/data/definitions/284)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-08\n - Due Date: 2026-09-22\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-81963](https://nvd.nist.gov/vuln/detail/CVE-2026-81963)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nAdobe | Commerce and Magento\n\n\n\n\n\n### [CVE-2026-75650](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability: Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.\n\n\n\n\n\n\n\nRelated CWE: [CWE-1336](https://cwe.mitre.org/data/definitions/1336)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-08\n - Due Date: 2026-09-11\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://helpx.adobe.com/security/products/magento/apsb26-146.html](https://helpx.adobe.com/security/products/magento/apsb26-146.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-75650](https://nvd.nist.gov/vuln/detail/CVE-2026-75650)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nGoogle | Chromium V8\n\n\n\n\n\n### [CVE-2026-85046](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGoogle Chromium V8 Type Confusion Vulnerability: Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\n\n\n\n\n\n\nRelated CWE: [CWE-843](https://cwe.mitre.org/data/definitions/843)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-04\n - Due Date: 2026-09-18\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html](https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85046](https://nvd.nist.gov/vuln/detail/CVE-2026-85046)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSonicWall | SMA1000 Appliances\n\n\n\n\n\n### [CVE-2026-83549](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSonicWall SMA1000 Appliances OS Command Injection Vulnerability: SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-78](https://cwe.mitre.org/data/definitions/78)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-83549](https://nvd.nist.gov/vuln/detail/CVE-2026-83549)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSonicWall | SMA1000 Appliances\n\n\n\n\n\n### [CVE-2026-83548](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability: SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-918](https://cwe.mitre.org/data/definitions/918)| [CWE-441](https://cwe.mitre.org/data/definitions/441)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-83548](https://nvd.nist.gov/vuln/detail/CVE-2026-83548)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSangoma | Switchvox\n\n\n\n\n\n### [CVE-2026-9586](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSangoma Switchvox SQL Injection Vulnerability: Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-89](https://cwe.mitre.org/data/definitions/89)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026](https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-9586](https://nvd.nist.gov/vuln/detail/CVE-2026-9586)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n### [CVE-2026-82329](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Improper Authentication Vulnerability: JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.\n\n\n\n\n\n\n\nRelated CWE: [CWE-287](https://cwe.mitre.org/data/definitions/287)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-82329](https://nvd.nist.gov/vuln/detail/CVE-2026-82329)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nKestra | Kestra OSS\n\n\n\n\n\n### [CVE-2026-49869](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nKestra OSS OS Command Injection Vulnerability: Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-78](https://cwe.mitre.org/data/definitions/78)| [CWE-184](https://cwe.mitre.org/data/definitions/184)| [CWE-287](https://cwe.mitre.org/data/definitions/287)| [CWE-918](https://cwe.mitre.org/data/definitions/918)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\nThis vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: [https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx](https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-49869](https://nvd.nist.gov/vuln/detail/CVE-2026-49869)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n - Currently on page 1\n - [Page 2](?page=1)\n - [Page 3](?page=2)\n - [Page 4](?page=3)\n - [Page 5](?page=4)\n - [Page 6](?page=5)\n - [Page 7](?page=6)\n - [Page 8](?page=7)\n - [Page 9](?page=8)\n - …\n - [Go to next pageNext](?page=1)\n - [Go to last pageLast](?page=85)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n## Subscribe to the KEV Catalog Updates\n\n\n\nStay up to date on the latest known exploited vulnerabilities.\n\n [Subscribe Now](https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=%5BREDACTED%5D)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n [Return to top](#top)\n\n\n\n\n\n\n\n\n - [Topics](/topics)\n - [Spotlight](/spotlight)\n - [Resources & Tools](/resources-tools)\n - [News & Events](/news-events)\n - [Careers](/careers)\n - [About](/about)\n\n\n\n\n\n\n\n\n\n\n\n\n\n [Cybersecurity & Infrastructure Security Agency](/)\n\n\n\n\n - [Facebook](https://www.facebook.com/CISA)\n - [X](https://x.com/CISAgov)\n - [LinkedIn](https://www.linkedin.com/company/cybersecurity-and-infrastructure-security-agency)\n - [YouTube](https://www.youtube.com/@cisagov)\n - [Instagram](https://www.instagram.com/cisagov)\n - [RSS](/subscribe-updates-cisa)\n\n\n\n CISA Central [1-844-Say-CISA](tel:1-844-Say-CISA) [contact@cisa.dhs.gov](mailto:contact@cisa.dhs.gov)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nDHS Seal\n\n\n\n\n\nCISA.gov\n\n\n\nAn official website of the U.S. Department of Homeland Security\n\n\n\n\n\n\n - [About CISA](/about)\n - [Budget and Performance](https://www.dhs.gov/performance-financial-reports)\n - [DHS.gov](https://www.dhs.gov)\n - [FOIA Requests](https://www.dhs.gov/foia)\n - [No FEAR Act](/no-fear-act)\n - [Office of Inspector General](https://www.oig.dhs.gov/)\n - [Privacy Policy](/privacy-policy)\n - [Subscribe](https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=%5BREDACTED%5D)\n - [The White House](https://www.whitehouse.gov/)\n - [USA.gov](https://www.usa.gov/)\n - [Website Feedback](/forms/feedback)", "content_length": 74723, "content_type": "text/html", "description": "For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat", "status_code": 200, "success": true, "title": "Known Exploited Vulnerabilities Catalog | CISA", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }

Sub-agent trace (toolu_014Mdx22kZGK9x3UiHNJEEcU, 3 events)

tools_started web_fetch t=118150.429

Inner payload

{
  "tool_name": "web_fetch",
  "tool_input": {
    "brief": "Check recent KEV catalog additions",
    "max_age_seconds": 3600,
    "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
  },
  "dispatch_id": "toolu_014Mdx22kZGK9x3UiHNJEEcU",
  "parent_dispatch_id": "",
  "handle": "",
  "panel_kind": "web_fetch"
}

tools_progress web_fetch t=118150.430

Inner payload

{
  "tool_name": "web_fetch",
  "dispatch_id": "toolu_014Mdx22kZGK9x3UiHNJEEcU",
  "status": "running",
  "result": null,
  "error": "",
  "elapsed": null,
  "fields": {
    "progress": {
      "message": "Check recent KEV catalog additions",
      "metadata": {
        "browser_chain": false,
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
      }
    },
    "status": "running",
    "updatedAt": 1789169524809
  }
}

tools_completed web_fetch t=118150.431

Inner payload

{
  "tool_name": "web_fetch",
  "dispatch_id": "toolu_014Mdx22kZGK9x3UiHNJEEcU",
  "status": "completed",
  "result": {
    "content": "Known Exploited Vulnerabilities Catalog | CISA\n\n [Skip to main content](#main)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n ![U.S. flag](/profiles/cisad8_gov/themes/custom/gesso/dist/images/us_flag_small.png)\n\n\n\n\n\nAn official website of the United States government\n\n\n\nHere’s how you know\n\n  Here’s how you know\n\n\n\n\n\n\n\n\n\n ![Dot gov](/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-dot-gov.svg)\n\n\n\n **Official websites use .gov**\n A **.gov** website belongs to an official government organization in the United States.\n\n\n\n\n\n\n\n ![HTTPS](/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-https.svg)\n\n\n\n **Secure .gov websites use HTTPS**\n A **lock** (LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[Staying Secure at Events](/staying-secure-large-scale-events)[no-cost Cyber Services](/resources-tools/resources/free-cybersecurity-services-and-tools)[Cybersecurity Awareness Month](/cybersecurity-awareness-month)[KEV Catalog](/kev)[Report A Cyber Issue](/report) \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[![Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience](/sites/default/files/images/SVG/header_logo_tagline_update.svg)![Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience](/sites/default/files/images/SVG/header_logo_tagline_update.png)](/)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[![CISA Logo](/sites/default/files/images/SVG/mobile_logo_wordmark.svg)](/)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSearch\n\n\n\n\n\n\n\n \n\n\n\n\n\n Menu\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n![America's Cyber Defense Agency](/sites/default/files/images/SVG/header_tagline_mobile_update.svg)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n Close\n\n\n\n \n\n\n\n\n -   Topics\n\n\n\n [Topics](/topics)\n\n\n\n\n\n\n\n [Cybersecurity Best Practices](/topics/cybersecurity-best-practices)\n\n\n\n\n\n\n\n [Cyber Threats and Response](/topics/cyber-threats-and-response)\n\n\n\n\n\n\n\n [Critical Infrastructure Security and Resilience](/topics/critical-infrastructure-security-and-resilience)\n\n\n\n\n\n\n\n [Election Security](/topics/election-security)\n\n\n\n\n\n\n\n [Emergency Communications](/topics/emergency-communications)\n\n\n\n\n\n\n\n [Industrial Control Systems](/topics/industrial-control-systems)\n\n\n\n\n\n\n\n [Information and Communications Technology Supply Chain Security](/topics/information-communications-technology-supply-chain-security)\n\n\n\n\n\n\n\n [Partnerships and Collaboration](/topics/partnerships-and-collaboration)\n\n\n\n\n\n\n\n [Physical Security](/topics/physical-security)\n\n\n\n\n\n\n\n [Risk Management](/topics/risk-management)\n\n\n\n\n\n\n\n\n\n [How can we help?](/audiences)\n\n\n\n[Government](/topics/government)[Educational Institutions](/topics/educational-institutions)[Industry](/topics/industry)[State, Local, Tribal, and Territorial](/topics/state-local-tribal-and-territorial)[Individuals and Families](/topics/individuals-and-families)[Small and Medium Businesses](/topics/small-and-medium-businesses)[Find Help Locally](/audiences/find-help-locally)[Faith-Based Community](/audiences/faith-based-community)[Executives](/audiences/executives)[High-Risk Communities](/audiences/high-risk-communities)\n\n\n\n\n\n\n -  [Spotlight](/spotlight)\n -   Resources & Tools\n\n\n\n [Resources & Tools](/resources-tools)\n\n\n\n\n\n\n\n [All Resources & Tools](/resources-tools/all-resources-tools)\n\n\n\n\n\n\n\n [Services](/resources-tools/services)\n\n\n\n\n\n\n\n [Programs](/resources-tools/programs)\n\n\n\n\n\n\n\n [Resources](/resources-tools/resources)\n\n\n\n\n\n\n\n [Training](/resources-tools/training)\n\n\n\n\n\n\n\n [Groups](/resources-tools/groups)\n\n\n\n\n\n\n\n\n -   News & Events\n\n\n\n [News & Events](/news-events)\n\n\n\n\n\n\n\n [Directives](/news-events/directives)\n\n\n\n\n\n\n\n [News](/news-events/news)\n\n\n\n\n\n\n\n [Events](/news-events/events)\n\n\n\n\n\n\n\n [Cybersecurity Alerts & Advisories](/news-events/cybersecurity-advisories)\n\n\n\n\n\n\n\n [Request a CISA Speaker](/news-events/request-speaker)\n\n\n\n\n\n\n\n [Congressional Testimony](/news-events/congressional-testimony)\n\n\n\n\n\n\n\n [CISA Conferences](/news-events/cisa-conferences)\n\n\n\n\n\n\n\n [CISA Live!](/cisa-live)\n\n\n\n\n\n\n\n\n -   Careers\n\n\n\n [Careers](/careers)\n\n\n\n\n\n\n\n [Benefits & Perks](/careers/benefits-perks)\n\n\n\n\n\n\n\n [Hiring and Recruitment](/careers/hiring-and-recruitment)\n\n\n\n\n\n\n\n [New Employee Orientation & Onboarding](/careers/new-employee-orientation-and-onboarding)\n\n\n\n\n\n\n\n [Students & Recent Graduates](/careers/students-recent-graduates-employment-opportunities)\n\n\n\n\n\n\n\n [Veteran and Military Spouses](/careers/veteran-and-military-spouse-employment-opportunities)\n\n\n\n\n\n\n\n\n -   About\n\n\n\n [About](/about)\n\n\n\n\n\n\n\n [Divisions & Offices](/about/divisions-offices)\n\n\n\n\n\n\n\n [Regions](/about/regions)\n\n\n\n\n\n\n\n [Leadership](/about/leadership)\n\n\n\n\n\n\n\n [Doing Business with CISA](/about/doing-business-cisa)\n\n\n\n\n\n\n\n [Site Links](/site-links)\n\n\n\n\n\n\n\n [CISA GitHub](/cisa-github)\n\n\n\n\n\n\n\n [CISA Central](/about/cisa-central)\n\n\n\n\n\n\n\n [Contact Us](/about/contact-us)\n\n\n\n\n\n\n\n [Subscribe](/about/contact-us/subscribe-updates-cisa)\n\n\n\n\n\n\n\n [Transparency and Accountability](/about/transparency-and-accountability)\n\n\n\n\n\n\n\n [Policies & Plans](/about/policies-plans)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[Staying Secure at Events](/staying-secure-large-scale-events)[no-cost Cyber Services](/resources-tools/resources/free-cybersecurity-services-and-tools)[Cybersecurity Awareness Month](/cybersecurity-awareness-month)[KEV Catalog](/kev)[Report A Cyber Issue](/report) \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nBreadcrumb\n\n\n -  [Home](/)\n -   Known Exploited Vulnerabilities Catalog\n\n\n\n\n\n\n\n\n\n\n\n Share:\n\n\n\n [Opens in a new window](https://www.facebook.com/sharer/sharer.php?u=%5BREDACTED%5D&title=%5BREDACTED%5D) [Opens in a new window](https://twitter.com/intent/tweet?text=%5BREDACTED%5D) [Opens in a new window](https://www.linkedin.com/sharing/share-offsite/?url=%5BREDACTED%5D) [mailto:?subject=Known%20Exploited%20Vulnerabilities%20Catalog&body=https://www.cisa.gov/known-exploited-vulnerabilities-catalog](mailto:?subject=%5BREDACTED%5D&body=%5BREDACTED%5D\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n### Search all Known Exploited Vulnerabilities Catalog\n\n\n\n Search by keyword, term, or phrase  (optional)\n\n\n\n Date Added  (optional)  Last 30 DaysLast 60 DaysLast 90 DaysLast Year\n\n\n\n CVE  (optional)\n\n\n\n Sort by  (optional)  Date AddedDue DateVendor/Project A-Z\n\n\n\n Items per page  (optional)  20- All -\n\n\n\n\n\n\n\n\n\n Leave this field blank  (optional)\n\n\n\n\n\n\n\n\n\n####  **Filters**\n\n\n\n\n\n\n\n### Vendor/Project\n\n\n\n\n\n\n- [Broadcom](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1320)\n- [Langflow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1324)\n- [N-able](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1339)\n- [Accellion](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A790)\n- [ConnectWise](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1041)\n- [SimpleHelp](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1291)\n- [Craft CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1292)\n- [Gladinet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1301)\n- [Sangoma](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1341)\n- [JFrog](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1957)\n- [Qlik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1000)\n- [CrushFTP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1048)\n- [Check Point](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1147)\n- [OSGeo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1168)\n- [BeyondTrust](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1284)\n- [TeleMessage](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1327)\n- [ASUS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1331)\n- [Dassault Systèmes](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1342)\n- [SmarterTools](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1360)\n- [TrueConf](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1369)\n- [BerriAI](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1373)\n- [ServiceNow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1174)\n- [Dahua](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1249)\n- [Versa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1266)\n- [PTZOptics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1273)\n- [CyberPersons](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1275)\n- [Metabase](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1277)\n- [Array Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1278)\n- [Cleo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1281)\n- [Reolink](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1282)\n- [NUUO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1283)\n- [Paessler](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1287)\n- [Hitachi Vantara](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1293)\n- [Advantive](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1296)\n- [Commvault](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1322)\n- [GeoVision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1326)\n- [Wing FTP Server](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1338)\n- [OpenPLC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1351)\n- [LiteSpeed](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1375)\n- [Arista](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1380)\n- [Unitronics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1001)\n- [FXC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1004)\n- [Spreadsheet::ParseExcel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1005)\n- [Joomla!](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1007)\n- [Sunhillo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1042)\n- [Nice](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1043)\n- [NextGen Healthcare](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1143)\n- [Justice AV Solutions](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1146)\n- [PHP Group](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1151)\n- [Twilio](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1172)\n- [Acronis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1173)\n- [Kingsoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1267)\n- [ScienceLogic](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1271)\n- [Nostromo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1274)\n- [North Grid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1279)\n- [ProjectSend](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1280)\n- [Acclaim Systems](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1285)\n- [JQuery](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1286)\n- [Audinate](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1288)\n- [7-Zip](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1289)\n- [Trimble](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1290)\n- [tj-actions](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1297)\n- [NAKIVO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1298)\n- [Edimax](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1299)\n- [reviewdog](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1300)\n- [Qualitia](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1321)\n- [Yiiframework](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1323)\n- [FreeType](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1325)\n- [ZKTeco](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1328)\n- [Srimax](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1329)\n- [MDaemon](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1330)\n- [Erlang](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1332)\n- [Wazuh](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1333)\n- [AMI](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1335)\n- [Looking Glass](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1336)\n- [Git](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1340)\n- [Libraesva](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1343)\n- [Adminer](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1344)\n- [Smartbedded](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1345)\n- [SKYSEA](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1346)\n- [IGEL](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1348)\n- [Motex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1349)\n- [XWiki](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1350)\n- [Meta](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1352)\n- [Sierra Wireless](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1353)\n- [Digiever](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1354)\n- [Hewlett Packard Enterprise (HPE)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1355)\n- [Gogs](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1356)\n- [Vite](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1357)\n- [Prettier](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1359)\n- [React Native Community](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1361)\n- [Notepad++](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1362)\n- [TeamT5](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1363)\n- [Soliton Systems K.K](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1364)\n- [Rockwell](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1365)\n- [Omnissa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1366)\n- [n8n](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1367)\n- [Aquasecurity](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1368)\n- [Marimo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1370)\n- [WebPros](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1372)\n- [Nx](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1376)\n- [TanStack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1377)\n- [Daemon](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1378)\n- [Mirasvit](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1379)\n- [Widget Factory](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1381)\n- [Splunk](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1382)\n- [Lantronix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1383)\n- [PTC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1384)\n- [JoomShaper](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1385)\n- [Joomlack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1386)\n- [Balbooa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1387)\n- [iCagenda](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1388)\n- [KNX Association](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1389)\n- [DD-WRT](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1390)\n- [Ray-Project](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1953)\n- [MLflow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1954)\n- [Gitea](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1955)\n- [Ajax.NET Professional](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1956)\n- [Kestra](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1958)\n- [Kludex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1959)\n- [ownCloud](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A999)\n- [Adobe](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A791)\n- [Alcatel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A917)\n- [Amcrest](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A792)\n- [Android](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A793)\n- [Apache](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A795)\n- [Apple](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A796)\n- [Arcadyan](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A797)\n- [Arcserve](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A899)\n- [Arm](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A798)\n- [Artifex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A922)\n- [Atlassian](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A799)\n- [Aviatrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A871)\n- [Barracuda Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A948)\n- [BQE](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A800)\n- [Cacti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A937)\n- [ChakraCore](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A882)\n- [Checkbox](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A910)\n- [Cisco](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A801)\n- [Citrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A802)\n- [Code Aurora](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A928)\n- [Crestron](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A912)\n- [CWP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A933)\n- [D-Link](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A803)\n- [D-Link and TRENDnet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A901)\n- [Dasan](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A908)\n- [Dell](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A907)\n- [Delta Electronics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A926)\n- [Docker](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A805)\n- [dotCMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A923)\n- [DotNetNuke (DNN)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A804)\n- [DrayTek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A806)\n- [Drupal](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A807)\n- [Elastic](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A868)\n- [Embedthis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A859)\n- [Exim](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A809)\n- [EyesOfNetwork](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A810)\n- [F5](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A811)\n- [FatPipe](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A869)\n- [ForgeRock](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A812)\n- [Fortinet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A813)\n- [Fortra](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A936)\n- [Fuel CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A861)\n- [GIGABYTE](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A929)\n- [GitLab](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A808)\n- [GNU](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A875)\n- [Google](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A814)\n- [Grafana Labs](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A925)\n- [Grandstream](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A873)\n- [Hewlett Packard (HP)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A903)\n- [Hikvision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A864)\n- [IBM](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A815)\n- [IETF](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A954)\n- [Ignite Realtime](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A951)\n- [ImageMagick](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A816)\n- [InduSoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A915)\n- [Intel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A874)\n- [Ivanti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A817)\n- [Jenkins](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A876)\n- [JetBrains](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A953)\n- [Juniper](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A892)\n- [Kaseya](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A818)\n- [Kentico](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A895)\n- [Laravel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A952)\n- [LG](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A896)\n- [Liferay](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A819)\n- [Linux](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A858)\n- [McAfee](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A820)\n- [MediaTek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A794)\n- [Meta Platforms](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A918)\n- [Micro Focus](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A821)\n- [Microsoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A822)\n- [MikroTik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A857)\n- [MinIO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A945)\n- [Mitel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A887)\n- [MongoDB](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A863)\n- [Mozilla](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A823)\n- [Nagios](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A824)\n- [NETGEAR](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A825)\n- [Netis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A826)\n- [Netwrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A949)\n- [Novi Survey](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A944)\n- [Npm package](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A872)\n- [October CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A870)\n- [OpenBSD](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A889)\n- [OpenSSL](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A920)\n- [Oracle](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A827)\n- [Palo Alto Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A866)\n- [PaperCut](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A946)\n- [PEAR](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A927)\n- [Perl](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A856)\n- [PHP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A894)\n- [phpMyAdmin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A904)\n- [PHPUnit](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A878)\n- [Pi-hole](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A862)\n- [PlaySMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A828)\n- [Plex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A941)\n- [Primetek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A867)\n- [Progress](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A829)\n- [Pulse Secure](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A885)\n- [QNAP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A906)\n- [QNAP Systems](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A891)\n- [Qualcomm](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A830)\n- [Quest](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A897)\n- [Rails](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A898)\n- [RARLAB](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A877)\n- [rConfig](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A831)\n- [Realtek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A832)\n- [Red Hat](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A860)\n- [Redis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A905)\n- [Rejetto](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A902)\n- [Roundcube](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A833)\n- [Ruckus Wireless](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A947)\n- [SaltStack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A834)\n- [Samba](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A942)\n- [Samsung](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A930)\n- [SAP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A835)\n- [Schneider Electric](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A913)\n- [Siemens](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A884)\n- [SIMalliance](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A836)\n- [Sitecore](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A888)\n- [SolarView](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A950)\n- [SolarWinds](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A837)\n- [Sonatype](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A838)\n- [SonicWall](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A839)\n- [Sophos](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A840)\n- [Sudo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A909)\n- [SugarCRM](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A934)\n- [Sumavision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A841)\n- [Symantec](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A842)\n- [Synacor](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A865)\n- [SysAid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A955)\n- [TeamViewer](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A843)\n- [Teclib](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A939)\n- [Telerik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A911)\n- [Tenda](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A845)\n- [TerraMaster](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A935)\n- [ThinkPHP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A846)\n- [TIBCO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A932)\n- [TP-Link](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A900)\n- [Treck TCP/IP stack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A881)\n- [Trend Micro](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A847)\n- [Trihedral](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A914)\n- [TVT](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A848)\n- [Ubiquiti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A916)\n- [Unraid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A849)\n- [vBulletin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A850)\n- [Veeam](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A931)\n- [Veritas](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A943)\n- [VMware](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A851)\n- [VMware Tanzu](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A890)\n- [WatchGuard](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A886)\n- [WebKitGTK](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A921)\n- [Webmin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A893)\n- [WebRTC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A924)\n- [WordPress](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A852)\n- [WSO2](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A919)\n- [XStream](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A940)\n- [Yealink](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A853)\n- [Zabbix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A879)\n- [ZK Framework](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A938)\n- [Zoho](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A854)\n- [Zyxel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A855)\n\n\n\nNo result\n\n\n\n\n\n\n\n\n\n [Reset](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)\n\n\n\n\n\n\n\n\n\n\n\n# Known Exploited Vulnerabilities Catalog\n\n\n\n\n\n\n\n\n\n\n\nFor the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework. Learn more about [how to use the KEV catalog](/known-exploited-vulnerabilities-catalog/reducing-significant-risk-known-exploited-vulnerabilities) in your organization.\n\nAre you aware of an actively exploited vulnerability not included in the KEV Catalog?\n[NOMINATE A NEW KEV](https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w)\n\nThe KEV catalog is also available in these formats:\n[CSV](/sites/default/files/csv/known_exploited_vulnerabilities.csv)[JSON](/sites/default/files/feeds/known_exploited_vulnerabilities.json) [Print View](/known-exploited-vulnerabilities-catalog-print)\n[JSON Schema](/sites/default/files/feeds/known_exploited_vulnerabilities_schema.json) (updated 06-25-2024)\n[License](/sites/default/files/licenses/kev/license.txt)\n\n\n\n\n\n\n\n---\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nShowing 1 to 20 of 1709 results\n\n\n\n\n\n\n\n\n\n\n\n\n\nGitLab | Community Edition and Enterprise Edition\n\n\n\n\n\n###  [CVE-2026-85706](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability:  GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.\n\n\n\n\n\n\n\nRelated CWE: [CWE-35](https://cwe.mitre.org/data/definitions/35)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-11\n - Due Date:  2026-09-14\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/](https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85706](https://nvd.nist.gov/vuln/detail/CVE-2026-85706)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n###  [CVE-2026-42018](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Improper Authentication Vulnerability:  JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.\n\n\n\n\n\n\n\nRelated CWE: [CWE-287](https://cwe.mitre.org/data/definitions/287)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** No**\n\n\n\n\n -  Date Added:  2026-09-11\n - Due Date:  2026-09-25\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-42018](https://nvd.nist.gov/vuln/detail/CVE-2026-42018)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n###  [CVE-2026-42016](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Incorrect Authorization Vulnerability:  JFrog Artifactory contains an incorrect authorization vulnerability that allows leads to privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.\n\n\n\n\n\n\n\nRelated CWE: [CWE-863](https://cwe.mitre.org/data/definitions/863)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** No**\n\n\n\n\n -  Date Added:  2026-09-11\n - Due Date:  2026-09-25\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-42016](https://nvd.nist.gov/vuln/detail/CVE-2026-42016)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nConnectWise | ScreenConnect\n\n\n\n\n\n###  [CVE-2026-84869](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability:  ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to file transfer and execution through an active remote sessions without authorization or host confirmation.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-269](https://cwe.mitre.org/data/definitions/269)| [CWE-862](https://cwe.mitre.org/data/definitions/862)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-11\n - Due Date:  2026-09-14\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin](https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-84869](https://nvd.nist.gov/vuln/detail/CVE-2026-84869)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMikroTik | RouterOS\n\n\n\n\n\n###  [CVE-2026-67277](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMikroTik RouterOS Missing Authentication for Critical Function Vulnerability:  MikroTik RouterOS contains a missing authenticaion for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.\n\n\n\n\n\n\n\nRelated CWE: [CWE-306](https://cwe.mitre.org/data/definitions/306)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** No**\n\n\n\n\n -  Date Added:  2026-09-10\n - Due Date:  2026-09-13\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://mikrotik.com/supportsec/september-2026-vulnerability/](https://mikrotik.com/supportsec/september-2026-vulnerability/) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-67277](https://nvd.nist.gov/vuln/detail/CVE-2026-67277)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMikroTik | RouterOS\n\n\n\n\n\n###  [CVE-2026-86060](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability:  MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted RouterOS policy mask, leading to privilege escalation.\n\n\n\n\n\n\n\nRelated CWE: [CWE-88](https://cwe.mitre.org/data/definitions/88)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-10\n - Due Date:  2026-09-13\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-86060](https://nvd.nist.gov/vuln/detail/CVE-2026-86060)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nCisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management\n\n\n\n\n\n###  [CVE-2026-20079](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability:  Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.\n\n\n\n\n\n\n\nRelated CWE: [CWE-288](https://cwe.mitre.org/data/definitions/288)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-09\n - Due Date:  2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-20079](https://nvd.nist.gov/vuln/detail/CVE-2026-20079)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nGoogle | Chromium V8\n\n\n\n\n\n###  [CVE-2026-87491](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGoogle Chromium V8 Out of Bounds Write Vulnerability:  Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\n\n\n\n\n\n\nRelated CWE: [CWE-787](https://cwe.mitre.org/data/definitions/787)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** No**\n\n\n\n\n -  Date Added:  2026-09-09\n - Due Date:  2026-09-23\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html](https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-87491](https://nvd.nist.gov/vuln/detail/CVE-2026-87491)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nFortinet | Multiple Products\n\n\n\n\n\n###  [CVE-2025-25249](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nFortinet Multiple Products Heap-based Buffer Overflow Vulnerability:  Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-122](https://cwe.mitre.org/data/definitions/122)| [CWE-787](https://cwe.mitre.org/data/definitions/787)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-09\n - Due Date:  2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://fortiguard.fortinet.com/psirt/FG-IR-25-084](https://fortiguard.fortinet.com/psirt/FG-IR-25-084) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2025-25249](https://nvd.nist.gov/vuln/detail/CVE-2025-25249)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nCitrix | NetScaler\n\n\n\n\n\n###  [CVE-2026-19490](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability:  Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.\n\n\n\n\n\n\n\nRelated CWE: [CWE-288](https://cwe.mitre.org/data/definitions/288)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-09\n - Due Date:  2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html](https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-19490](https://nvd.nist.gov/vuln/detail/CVE-2026-19490)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMicrosoft | Windows\n\n\n\n\n\n###  [CVE-2026-85880](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMicrosoft Windows Heap-Based Buffer Overflow Vulnerability:  Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-122](https://cwe.mitre.org/data/definitions/122)| [CWE-908](https://cwe.mitre.org/data/definitions/908)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** No**\n\n\n\n\n -  Date Added:  2026-09-08\n - Due Date:  2026-09-22\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85880](https://nvd.nist.gov/vuln/detail/CVE-2026-85880)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nN-able | N-central\n\n\n\n\n\n###  [CVE-2026-86218](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nN-able N-central Static Code Injection Vulnerability:  N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-96](https://cwe.mitre.org/data/definitions/96)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-08\n - Due Date:  2026-09-11\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/](https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/) ; [https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution](https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-86218](https://nvd.nist.gov/vuln/detail/CVE-2026-86218)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMicrosoft | Windows\n\n\n\n\n\n###  [CVE-2026-81963](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMicrosoft Windows Link Following Vulnerability:  Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-59](https://cwe.mitre.org/data/definitions/59)| [CWE-284](https://cwe.mitre.org/data/definitions/284)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** No**\n\n\n\n\n -  Date Added:  2026-09-08\n - Due Date:  2026-09-22\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-81963](https://nvd.nist.gov/vuln/detail/CVE-2026-81963)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nAdobe | Commerce and Magento\n\n\n\n\n\n###  [CVE-2026-75650](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability:  Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.\n\n\n\n\n\n\n\nRelated CWE: [CWE-1336](https://cwe.mitre.org/data/definitions/1336)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-08\n - Due Date:  2026-09-11\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://helpx.adobe.com/security/products/magento/apsb26-146.html](https://helpx.adobe.com/security/products/magento/apsb26-146.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-75650](https://nvd.nist.gov/vuln/detail/CVE-2026-75650)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nGoogle | Chromium V8\n\n\n\n\n\n###  [CVE-2026-85046](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGoogle Chromium V8 Type Confusion Vulnerability:  Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\n\n\n\n\n\n\nRelated CWE: [CWE-843](https://cwe.mitre.org/data/definitions/843)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** No**\n\n\n\n\n -  Date Added:  2026-09-04\n - Due Date:  2026-09-18\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html](https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85046](https://nvd.nist.gov/vuln/detail/CVE-2026-85046)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSonicWall | SMA1000 Appliances\n\n\n\n\n\n###  [CVE-2026-83549](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSonicWall SMA1000 Appliances OS Command Injection Vulnerability:  SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-78](https://cwe.mitre.org/data/definitions/78)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-02\n - Due Date:  2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-83549](https://nvd.nist.gov/vuln/detail/CVE-2026-83549)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSonicWall | SMA1000 Appliances\n\n\n\n\n\n###  [CVE-2026-83548](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability:  SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-918](https://cwe.mitre.org/data/definitions/918)| [CWE-441](https://cwe.mitre.org/data/definitions/441)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-02\n - Due Date:  2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-83548](https://nvd.nist.gov/vuln/detail/CVE-2026-83548)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSangoma | Switchvox\n\n\n\n\n\n###  [CVE-2026-9586](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSangoma Switchvox SQL Injection Vulnerability:  Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-89](https://cwe.mitre.org/data/definitions/89)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-02\n - Due Date:  2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026](https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-9586](https://nvd.nist.gov/vuln/detail/CVE-2026-9586)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n###  [CVE-2026-82329](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Improper Authentication Vulnerability:  JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.\n\n\n\n\n\n\n\nRelated CWE: [CWE-287](https://cwe.mitre.org/data/definitions/287)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-02\n - Due Date:  2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-82329](https://nvd.nist.gov/vuln/detail/CVE-2026-82329)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nKestra | Kestra OSS\n\n\n\n\n\n###  [CVE-2026-49869](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nKestra OSS OS Command Injection Vulnerability:  Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-78](https://cwe.mitre.org/data/definitions/78)| [CWE-184](https://cwe.mitre.org/data/definitions/184)| [CWE-287](https://cwe.mitre.org/data/definitions/287)| [CWE-918](https://cwe.mitre.org/data/definitions/918)\n\n\n\n\n\n\n\n\n -   Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04:  ** Yes**\n\n\n\n\n -  Date Added:  2026-09-02\n - Due Date:  2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\nThis vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: [https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx](https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-49869](https://nvd.nist.gov/vuln/detail/CVE-2026-49869)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n -   Currently on page 1\n -  [Page 2](?page=1)\n -  [Page 3](?page=2)\n -  [Page 4](?page=3)\n -  [Page 5](?page=4)\n -  [Page 6](?page=5)\n -  [Page 7](?page=6)\n -  [Page 8](?page=7)\n -  [Page 9](?page=8)\n - …\n -  [Go to next pageNext](?page=1)\n -  [Go to last pageLast](?page=85)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n## Subscribe to the KEV Catalog Updates\n\n\n\nStay up to date on the latest known exploited vulnerabilities.\n\n [Subscribe Now](https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=%5BREDACTED%5D)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n [Return to top](#top)\n\n\n\n\n\n\n\n\n -  [Topics](/topics)\n -  [Spotlight](/spotlight)\n -  [Resources & Tools](/resources-tools)\n -  [News & Events](/news-events)\n -  [Careers](/careers)\n -  [About](/about)\n\n\n\n\n\n\n\n\n\n\n\n\n\n [Cybersecurity & Infrastructure Security Agency](/)\n\n\n\n\n -  [Facebook](https://www.facebook.com/CISA)\n -  [X](https://x.com/CISAgov)\n -  [LinkedIn](https://www.linkedin.com/company/cybersecurity-and-infrastructure-security-agency)\n -  [YouTube](https://www.youtube.com/@cisagov)\n -  [Instagram](https://www.instagram.com/cisagov)\n -  [RSS](/subscribe-updates-cisa)\n\n\n\n CISA Central [1-844-Say-CISA](tel:1-844-Say-CISA) [contact@cisa.dhs.gov](mailto:contact@cisa.dhs.gov)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nDHS Seal\n\n\n\n\n\nCISA.gov\n\n\n\nAn official website of the U.S. Department of Homeland Security\n\n\n\n\n\n\n -  [About CISA](/about)\n -  [Budget and Performance](https://www.dhs.gov/performance-financial-reports)\n -  [DHS.gov](https://www.dhs.gov)\n -  [FOIA Requests](https://www.dhs.gov/foia)\n -  [No FEAR Act](/no-fear-act)\n -  [Office of Inspector General](https://www.oig.dhs.gov/)\n -  [Privacy Policy](/privacy-policy)\n -  [Subscribe](https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=%5BREDACTED%5D)\n -  [The White House](https://www.whitehouse.gov/)\n -  [USA.gov](https://www.usa.gov/)\n -  [Website Feedback](/forms/feedback)",
    "content_length": 74723,
    "content_type": "text/html",
    "description": "For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat",
    "status_code": 200,
    "success": true,
    "title": "Known Exploited Vulnerabilities Catalog | CISA",
    "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
  },
  "error": "",
  "elapsed": 0.109607817
}

CVE	Affected product	Due date
CVE-2026-85706	GitLab CE/EE (path traversal)	2026-09-14
CVE-2026-42018	JFrog Artifactory (improper authentication)	2026-09-25
CVE-2026-42016	JFrog Artifactory (incorrect authorization)	2026-09-25
CVE-2026-84869	ConnectWise ScreenConnect (privilege mgmt / missing authz)	2026-09-14
CVE-2026-67277	MikroTik RouterOS (missing auth, btest)	2026-09-13
CVE-2026-86060	MikroTik RouterOS (argument delimiter injection)	2026-09-13
CVE-2026-20079	Cisco Secure Firewall Management Center / SCC Firewall Mgmt (auth bypass)	2026-09-12
CVE-2026-87491	Google Chromium V8 (out-of-bounds write)	2026-09-23
CVE-2025-25249	Fortinet FortiOS, FortiSwitchManager, FortiSASE (heap overflow)	2026-09-12
CVE-2026-19490	Citrix NetScaler ADC/Gateway (auth bypass)	2026-09-12
CVE-2026-85880	Microsoft Windows ALPC (heap overflow, local EoP)	2026-09-22
CVE-2026-86218	N-able N-central (static code injection, pre-auth RCE)	2026-09-11
CVE-2026-81963	Microsoft Windows Update Stack (link following, EoP to SYSTEM)	2026-09-22
CVE-2026-75650	Adobe Commerce / Magento Open Source (template engine RCE)	2026-09-11
CVE-2026-85046	Google Chromium V8 (type confusion)	2026-09-18

E0004 · turn 1 · tool result · web_fetch · dispatch toolu_014Mdx22kZGK9x3UiHNJEEcU

{"dispatch_id": "toolu_014Mdx22kZGK9x3UiHNJEEcU", "elapsed": 0.109607817, "error": "", "result": {"content": "Known Exploited Vulnerabilities Catalog | CISA\n\n [Skip to main content](#main)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n ![U.S. flag](/profiles/cisad8_gov/themes/custom/gesso/dist/images/us_flag_small.png)\n\n\n\n\n\nAn official website of the United States government\n\n\n\nHere’s how you know\n\n Here’s how you know\n\n\n\n\n\n\n\n\n\n ![Dot gov](/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-dot-gov.svg)\n\n\n\n **Official websites use .gov**\n A **.gov** website belongs to an official government organization in the United States.\n\n\n\n\n\n\n\n ![HTTPS](/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-https.svg)\n\n\n\n **Secure .gov websites use HTTPS**\n A **lock** (LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[Staying Secure at Events](/staying-secure-large-scale-events)[no-cost Cyber Services](/resources-tools/resources/free-cybersecurity-services-and-tools)[Cybersecurity Awareness Month](/cybersecurity-awareness-month)[KEV Catalog](/kev)[Report A Cyber Issue](/report) \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[![Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience](/sites/default/files/images/SVG/header_logo_tagline_update.svg)![Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience](/sites/default/files/images/SVG/header_logo_tagline_update.png)](/)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[![CISA Logo](/sites/default/files/images/SVG/mobile_logo_wordmark.svg)](/)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSearch\n\n\n\n\n\n\n\n \n\n\n\n\n\n Menu\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n![America's Cyber Defense Agency](/sites/default/files/images/SVG/header_tagline_mobile_update.svg)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n Close\n\n\n\n \n\n\n\n\n - Topics\n\n\n\n [Topics](/topics)\n\n\n\n\n\n\n\n [Cybersecurity Best Practices](/topics/cybersecurity-best-practices)\n\n\n\n\n\n\n\n [Cyber Threats and Response](/topics/cyber-threats-and-response)\n\n\n\n\n\n\n\n [Critical Infrastructure Security and Resilience](/topics/critical-infrastructure-security-and-resilience)\n\n\n\n\n\n\n\n [Election Security](/topics/election-security)\n\n\n\n\n\n\n\n [Emergency Communications](/topics/emergency-communications)\n\n\n\n\n\n\n\n [Industrial Control Systems](/topics/industrial-control-systems)\n\n\n\n\n\n\n\n [Information and Communications Technology Supply Chain Security](/topics/information-communications-technology-supply-chain-security)\n\n\n\n\n\n\n\n [Partnerships and Collaboration](/topics/partnerships-and-collaboration)\n\n\n\n\n\n\n\n [Physical Security](/topics/physical-security)\n\n\n\n\n\n\n\n [Risk Management](/topics/risk-management)\n\n\n\n\n\n\n\n\n\n [How can we help?](/audiences)\n\n\n\n[Government](/topics/government)[Educational Institutions](/topics/educational-institutions)[Industry](/topics/industry)[State, Local, Tribal, and Territorial](/topics/state-local-tribal-and-territorial)[Individuals and Families](/topics/individuals-and-families)[Small and Medium Businesses](/topics/small-and-medium-businesses)[Find Help Locally](/audiences/find-help-locally)[Faith-Based Community](/audiences/faith-based-community)[Executives](/audiences/executives)[High-Risk Communities](/audiences/high-risk-communities)\n\n\n\n\n\n\n - [Spotlight](/spotlight)\n - Resources & Tools\n\n\n\n [Resources & Tools](/resources-tools)\n\n\n\n\n\n\n\n [All Resources & Tools](/resources-tools/all-resources-tools)\n\n\n\n\n\n\n\n [Services](/resources-tools/services)\n\n\n\n\n\n\n\n [Programs](/resources-tools/programs)\n\n\n\n\n\n\n\n [Resources](/resources-tools/resources)\n\n\n\n\n\n\n\n [Training](/resources-tools/training)\n\n\n\n\n\n\n\n [Groups](/resources-tools/groups)\n\n\n\n\n\n\n\n\n - News & Events\n\n\n\n [News & Events](/news-events)\n\n\n\n\n\n\n\n [Directives](/news-events/directives)\n\n\n\n\n\n\n\n [News](/news-events/news)\n\n\n\n\n\n\n\n [Events](/news-events/events)\n\n\n\n\n\n\n\n [Cybersecurity Alerts & Advisories](/news-events/cybersecurity-advisories)\n\n\n\n\n\n\n\n [Request a CISA Speaker](/news-events/request-speaker)\n\n\n\n\n\n\n\n [Congressional Testimony](/news-events/congressional-testimony)\n\n\n\n\n\n\n\n [CISA Conferences](/news-events/cisa-conferences)\n\n\n\n\n\n\n\n [CISA Live!](/cisa-live)\n\n\n\n\n\n\n\n\n - Careers\n\n\n\n [Careers](/careers)\n\n\n\n\n\n\n\n [Benefits & Perks](/careers/benefits-perks)\n\n\n\n\n\n\n\n [Hiring and Recruitment](/careers/hiring-and-recruitment)\n\n\n\n\n\n\n\n [New Employee Orientation & Onboarding](/careers/new-employee-orientation-and-onboarding)\n\n\n\n\n\n\n\n [Students & Recent Graduates](/careers/students-recent-graduates-employment-opportunities)\n\n\n\n\n\n\n\n [Veteran and Military Spouses](/careers/veteran-and-military-spouse-employment-opportunities)\n\n\n\n\n\n\n\n\n - About\n\n\n\n [About](/about)\n\n\n\n\n\n\n\n [Divisions & Offices](/about/divisions-offices)\n\n\n\n\n\n\n\n [Regions](/about/regions)\n\n\n\n\n\n\n\n [Leadership](/about/leadership)\n\n\n\n\n\n\n\n [Doing Business with CISA](/about/doing-business-cisa)\n\n\n\n\n\n\n\n [Site Links](/site-links)\n\n\n\n\n\n\n\n [CISA GitHub](/cisa-github)\n\n\n\n\n\n\n\n [CISA Central](/about/cisa-central)\n\n\n\n\n\n\n\n [Contact Us](/about/contact-us)\n\n\n\n\n\n\n\n [Subscribe](/about/contact-us/subscribe-updates-cisa)\n\n\n\n\n\n\n\n [Transparency and Accountability](/about/transparency-and-accountability)\n\n\n\n\n\n\n\n [Policies & Plans](/about/policies-plans)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n[Staying Secure at Events](/staying-secure-large-scale-events)[no-cost Cyber Services](/resources-tools/resources/free-cybersecurity-services-and-tools)[Cybersecurity Awareness Month](/cybersecurity-awareness-month)[KEV Catalog](/kev)[Report A Cyber Issue](/report) \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nBreadcrumb\n\n\n - [Home](/)\n - Known Exploited Vulnerabilities Catalog\n\n\n\n\n\n\n\n\n\n\n\n Share:\n\n\n\n [Opens in a new window](https://www.facebook.com/sharer/sharer.php?u=%5BREDACTED%5D&title=%5BREDACTED%5D) [Opens in a new window](https://twitter.com/intent/tweet?text=%5BREDACTED%5D) [Opens in a new window](https://www.linkedin.com/sharing/share-offsite/?url=%5BREDACTED%5D) [mailto:?subject=Known%20Exploited%20Vulnerabilities%20Catalog&body=https://www.cisa.gov/known-exploited-vulnerabilities-catalog](mailto:?subject=%5BREDACTED%5D&body=%5BREDACTED%5D\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n### Search all Known Exploited Vulnerabilities Catalog\n\n\n\n Search by keyword, term, or phrase (optional)\n\n\n\n Date Added (optional) Last 30 DaysLast 60 DaysLast 90 DaysLast Year\n\n\n\n CVE (optional)\n\n\n\n Sort by (optional) Date AddedDue DateVendor/Project A-Z\n\n\n\n Items per page (optional) 20- All -\n\n\n\n\n\n\n\n\n\n Leave this field blank (optional)\n\n\n\n\n\n\n\n\n\n#### **Filters**\n\n\n\n\n\n\n\n### Vendor/Project\n\n\n\n\n\n\n- [Broadcom](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1320)\n- [Langflow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1324)\n- [N-able](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1339)\n- [Accellion](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A790)\n- [ConnectWise](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1041)\n- [SimpleHelp](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1291)\n- [Craft CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1292)\n- [Gladinet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1301)\n- [Sangoma](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1341)\n- [JFrog](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1957)\n- [Qlik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1000)\n- [CrushFTP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1048)\n- [Check Point](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1147)\n- [OSGeo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1168)\n- [BeyondTrust](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1284)\n- [TeleMessage](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1327)\n- [ASUS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1331)\n- [Dassault Systèmes](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1342)\n- [SmarterTools](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1360)\n- [TrueConf](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1369)\n- [BerriAI](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1373)\n- [ServiceNow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1174)\n- [Dahua](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1249)\n- [Versa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1266)\n- [PTZOptics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1273)\n- [CyberPersons](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1275)\n- [Metabase](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1277)\n- [Array Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1278)\n- [Cleo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1281)\n- [Reolink](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1282)\n- [NUUO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1283)\n- [Paessler](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1287)\n- [Hitachi Vantara](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1293)\n- [Advantive](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1296)\n- [Commvault](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1322)\n- [GeoVision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1326)\n- [Wing FTP Server](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1338)\n- [OpenPLC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1351)\n- [LiteSpeed](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1375)\n- [Arista](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1380)\n- [Unitronics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1001)\n- [FXC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1004)\n- [Spreadsheet::ParseExcel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1005)\n- [Joomla!](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1007)\n- [Sunhillo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1042)\n- [Nice](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1043)\n- [NextGen Healthcare](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1143)\n- [Justice AV Solutions](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1146)\n- [PHP Group](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1151)\n- [Twilio](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1172)\n- [Acronis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1173)\n- [Kingsoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1267)\n- [ScienceLogic](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1271)\n- [Nostromo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1274)\n- [North Grid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1279)\n- [ProjectSend](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1280)\n- [Acclaim Systems](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1285)\n- [JQuery](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1286)\n- [Audinate](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1288)\n- [7-Zip](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1289)\n- [Trimble](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1290)\n- [tj-actions](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1297)\n- [NAKIVO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1298)\n- [Edimax](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1299)\n- [reviewdog](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1300)\n- [Qualitia](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1321)\n- [Yiiframework](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1323)\n- [FreeType](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1325)\n- [ZKTeco](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1328)\n- [Srimax](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1329)\n- [MDaemon](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1330)\n- [Erlang](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1332)\n- [Wazuh](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1333)\n- [AMI](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1335)\n- [Looking Glass](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1336)\n- [Git](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1340)\n- [Libraesva](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1343)\n- [Adminer](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1344)\n- [Smartbedded](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1345)\n- [SKYSEA](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1346)\n- [IGEL](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1348)\n- [Motex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1349)\n- [XWiki](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1350)\n- [Meta](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1352)\n- [Sierra Wireless](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1353)\n- [Digiever](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1354)\n- [Hewlett Packard Enterprise (HPE)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1355)\n- [Gogs](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1356)\n- [Vite](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1357)\n- [Prettier](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1359)\n- [React Native Community](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1361)\n- [Notepad++](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1362)\n- [TeamT5](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1363)\n- [Soliton Systems K.K](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1364)\n- [Rockwell](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1365)\n- [Omnissa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1366)\n- [n8n](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1367)\n- [Aquasecurity](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1368)\n- [Marimo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1370)\n- [WebPros](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1372)\n- [Nx](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1376)\n- [TanStack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1377)\n- [Daemon](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1378)\n- [Mirasvit](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1379)\n- [Widget Factory](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1381)\n- [Splunk](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1382)\n- [Lantronix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1383)\n- [PTC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1384)\n- [JoomShaper](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1385)\n- [Joomlack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1386)\n- [Balbooa](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1387)\n- [iCagenda](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1388)\n- [KNX Association](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1389)\n- [DD-WRT](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1390)\n- [Ray-Project](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1953)\n- [MLflow](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1954)\n- [Gitea](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1955)\n- [Ajax.NET Professional](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1956)\n- [Kestra](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1958)\n- [Kludex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A1959)\n- [ownCloud](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A999)\n- [Adobe](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A791)\n- [Alcatel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A917)\n- [Amcrest](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A792)\n- [Android](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A793)\n- [Apache](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A795)\n- [Apple](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A796)\n- [Arcadyan](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A797)\n- [Arcserve](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A899)\n- [Arm](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A798)\n- [Artifex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A922)\n- [Atlassian](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A799)\n- [Aviatrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A871)\n- [Barracuda Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A948)\n- [BQE](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A800)\n- [Cacti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A937)\n- [ChakraCore](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A882)\n- [Checkbox](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A910)\n- [Cisco](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A801)\n- [Citrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A802)\n- [Code Aurora](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A928)\n- [Crestron](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A912)\n- [CWP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A933)\n- [D-Link](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A803)\n- [D-Link and TRENDnet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A901)\n- [Dasan](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A908)\n- [Dell](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A907)\n- [Delta Electronics](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A926)\n- [Docker](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A805)\n- [dotCMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A923)\n- [DotNetNuke (DNN)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A804)\n- [DrayTek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A806)\n- [Drupal](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A807)\n- [Elastic](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A868)\n- [Embedthis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A859)\n- [Exim](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A809)\n- [EyesOfNetwork](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A810)\n- [F5](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A811)\n- [FatPipe](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A869)\n- [ForgeRock](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A812)\n- [Fortinet](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A813)\n- [Fortra](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A936)\n- [Fuel CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A861)\n- [GIGABYTE](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A929)\n- [GitLab](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A808)\n- [GNU](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A875)\n- [Google](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A814)\n- [Grafana Labs](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A925)\n- [Grandstream](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A873)\n- [Hewlett Packard (HP)](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A903)\n- [Hikvision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A864)\n- [IBM](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A815)\n- [IETF](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A954)\n- [Ignite Realtime](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A951)\n- [ImageMagick](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A816)\n- [InduSoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A915)\n- [Intel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A874)\n- [Ivanti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A817)\n- [Jenkins](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A876)\n- [JetBrains](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A953)\n- [Juniper](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A892)\n- [Kaseya](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A818)\n- [Kentico](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A895)\n- [Laravel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A952)\n- [LG](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A896)\n- [Liferay](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A819)\n- [Linux](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A858)\n- [McAfee](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A820)\n- [MediaTek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A794)\n- [Meta Platforms](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A918)\n- [Micro Focus](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A821)\n- [Microsoft](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A822)\n- [MikroTik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A857)\n- [MinIO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A945)\n- [Mitel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A887)\n- [MongoDB](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A863)\n- [Mozilla](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A823)\n- [Nagios](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A824)\n- [NETGEAR](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A825)\n- [Netis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A826)\n- [Netwrix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A949)\n- [Novi Survey](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A944)\n- [Npm package](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A872)\n- [October CMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A870)\n- [OpenBSD](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A889)\n- [OpenSSL](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A920)\n- [Oracle](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A827)\n- [Palo Alto Networks](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A866)\n- [PaperCut](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A946)\n- [PEAR](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A927)\n- [Perl](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A856)\n- [PHP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A894)\n- [phpMyAdmin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A904)\n- [PHPUnit](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A878)\n- [Pi-hole](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A862)\n- [PlaySMS](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A828)\n- [Plex](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A941)\n- [Primetek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A867)\n- [Progress](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A829)\n- [Pulse Secure](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A885)\n- [QNAP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A906)\n- [QNAP Systems](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A891)\n- [Qualcomm](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A830)\n- [Quest](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A897)\n- [Rails](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A898)\n- [RARLAB](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A877)\n- [rConfig](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A831)\n- [Realtek](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A832)\n- [Red Hat](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A860)\n- [Redis](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A905)\n- [Rejetto](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A902)\n- [Roundcube](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A833)\n- [Ruckus Wireless](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A947)\n- [SaltStack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A834)\n- [Samba](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A942)\n- [Samsung](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A930)\n- [SAP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A835)\n- [Schneider Electric](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A913)\n- [Siemens](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A884)\n- [SIMalliance](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A836)\n- [Sitecore](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A888)\n- [SolarView](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A950)\n- [SolarWinds](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A837)\n- [Sonatype](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A838)\n- [SonicWall](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A839)\n- [Sophos](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A840)\n- [Sudo](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A909)\n- [SugarCRM](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A934)\n- [Sumavision](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A841)\n- [Symantec](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A842)\n- [Synacor](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A865)\n- [SysAid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A955)\n- [TeamViewer](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A843)\n- [Teclib](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A939)\n- [Telerik](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A911)\n- [Tenda](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A845)\n- [TerraMaster](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A935)\n- [ThinkPHP](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A846)\n- [TIBCO](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A932)\n- [TP-Link](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A900)\n- [Treck TCP/IP stack](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A881)\n- [Trend Micro](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A847)\n- [Trihedral](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A914)\n- [TVT](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A848)\n- [Ubiquiti](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A916)\n- [Unraid](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A849)\n- [vBulletin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A850)\n- [Veeam](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A931)\n- [Veritas](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A943)\n- [VMware](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A851)\n- [VMware Tanzu](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A890)\n- [WatchGuard](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A886)\n- [WebKitGTK](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A921)\n- [Webmin](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A893)\n- [WebRTC](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A924)\n- [WordPress](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A852)\n- [WSO2](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A919)\n- [XStream](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A940)\n- [Yealink](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A853)\n- [Zabbix](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A879)\n- [ZK Framework](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A938)\n- [Zoho](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A854)\n- [Zyxel](/known-exploited-vulnerabilities-catalog?f%5B0%5D=vendor_project%3A855)\n\n\n\nNo result\n\n\n\n\n\n\n\n\n\n [Reset](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)\n\n\n\n\n\n\n\n\n\n\n\n# Known Exploited Vulnerabilities Catalog\n\n\n\n\n\n\n\n\n\n\n\nFor the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework. Learn more about [how to use the KEV catalog](/known-exploited-vulnerabilities-catalog/reducing-significant-risk-known-exploited-vulnerabilities) in your organization.\n\nAre you aware of an actively exploited vulnerability not included in the KEV Catalog?\n[NOMINATE A NEW KEV](https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w)\n\nThe KEV catalog is also available in these formats:\n[CSV](/sites/default/files/csv/known_exploited_vulnerabilities.csv)[JSON](/sites/default/files/feeds/known_exploited_vulnerabilities.json) [Print View](/known-exploited-vulnerabilities-catalog-print)\n[JSON Schema](/sites/default/files/feeds/known_exploited_vulnerabilities_schema.json) (updated 06-25-2024)\n[License](/sites/default/files/licenses/kev/license.txt)\n\n\n\n\n\n\n\n---\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nShowing 1 to 20 of 1709 results\n\n\n\n\n\n\n\n\n\n\n\n\n\nGitLab | Community Edition and Enterprise Edition\n\n\n\n\n\n### [CVE-2026-85706](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability: GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.\n\n\n\n\n\n\n\nRelated CWE: [CWE-35](https://cwe.mitre.org/data/definitions/35)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-11\n - Due Date: 2026-09-14\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/](https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85706](https://nvd.nist.gov/vuln/detail/CVE-2026-85706)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n### [CVE-2026-42018](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Improper Authentication Vulnerability: JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.\n\n\n\n\n\n\n\nRelated CWE: [CWE-287](https://cwe.mitre.org/data/definitions/287)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-11\n - Due Date: 2026-09-25\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-42018](https://nvd.nist.gov/vuln/detail/CVE-2026-42018)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n### [CVE-2026-42016](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Incorrect Authorization Vulnerability: JFrog Artifactory contains an incorrect authorization vulnerability that allows leads to privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.\n\n\n\n\n\n\n\nRelated CWE: [CWE-863](https://cwe.mitre.org/data/definitions/863)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-11\n - Due Date: 2026-09-25\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-42016](https://nvd.nist.gov/vuln/detail/CVE-2026-42016)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nConnectWise | ScreenConnect\n\n\n\n\n\n### [CVE-2026-84869](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability: ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to file transfer and execution through an active remote sessions without authorization or host confirmation.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-269](https://cwe.mitre.org/data/definitions/269)| [CWE-862](https://cwe.mitre.org/data/definitions/862)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-11\n - Due Date: 2026-09-14\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin](https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-84869](https://nvd.nist.gov/vuln/detail/CVE-2026-84869)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMikroTik | RouterOS\n\n\n\n\n\n### [CVE-2026-67277](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMikroTik RouterOS Missing Authentication for Critical Function Vulnerability: MikroTik RouterOS contains a missing authenticaion for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.\n\n\n\n\n\n\n\nRelated CWE: [CWE-306](https://cwe.mitre.org/data/definitions/306)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-10\n - Due Date: 2026-09-13\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://mikrotik.com/supportsec/september-2026-vulnerability/](https://mikrotik.com/supportsec/september-2026-vulnerability/) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-67277](https://nvd.nist.gov/vuln/detail/CVE-2026-67277)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMikroTik | RouterOS\n\n\n\n\n\n### [CVE-2026-86060](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability: MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted RouterOS policy mask, leading to privilege escalation.\n\n\n\n\n\n\n\nRelated CWE: [CWE-88](https://cwe.mitre.org/data/definitions/88)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-10\n - Due Date: 2026-09-13\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-86060](https://nvd.nist.gov/vuln/detail/CVE-2026-86060)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nCisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management\n\n\n\n\n\n### [CVE-2026-20079](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.\n\n\n\n\n\n\n\nRelated CWE: [CWE-288](https://cwe.mitre.org/data/definitions/288)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-09\n - Due Date: 2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-20079](https://nvd.nist.gov/vuln/detail/CVE-2026-20079)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nGoogle | Chromium V8\n\n\n\n\n\n### [CVE-2026-87491](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGoogle Chromium V8 Out of Bounds Write Vulnerability: Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\n\n\n\n\n\n\nRelated CWE: [CWE-787](https://cwe.mitre.org/data/definitions/787)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-09\n - Due Date: 2026-09-23\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html](https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-87491](https://nvd.nist.gov/vuln/detail/CVE-2026-87491)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nFortinet | Multiple Products\n\n\n\n\n\n### [CVE-2025-25249](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nFortinet Multiple Products Heap-based Buffer Overflow Vulnerability: Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-122](https://cwe.mitre.org/data/definitions/122)| [CWE-787](https://cwe.mitre.org/data/definitions/787)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-09\n - Due Date: 2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://fortiguard.fortinet.com/psirt/FG-IR-25-084](https://fortiguard.fortinet.com/psirt/FG-IR-25-084) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2025-25249](https://nvd.nist.gov/vuln/detail/CVE-2025-25249)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nCitrix | NetScaler\n\n\n\n\n\n### [CVE-2026-19490](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability: Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.\n\n\n\n\n\n\n\nRelated CWE: [CWE-288](https://cwe.mitre.org/data/definitions/288)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-09\n - Due Date: 2026-09-12\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html](https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-19490](https://nvd.nist.gov/vuln/detail/CVE-2026-19490)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMicrosoft | Windows\n\n\n\n\n\n### [CVE-2026-85880](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMicrosoft Windows Heap-Based Buffer Overflow Vulnerability: Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-122](https://cwe.mitre.org/data/definitions/122)| [CWE-908](https://cwe.mitre.org/data/definitions/908)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-08\n - Due Date: 2026-09-22\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85880](https://nvd.nist.gov/vuln/detail/CVE-2026-85880)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nN-able | N-central\n\n\n\n\n\n### [CVE-2026-86218](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nN-able N-central Static Code Injection Vulnerability: N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-96](https://cwe.mitre.org/data/definitions/96)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-08\n - Due Date: 2026-09-11\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/](https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/) ; [https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution](https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-86218](https://nvd.nist.gov/vuln/detail/CVE-2026-86218)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMicrosoft | Windows\n\n\n\n\n\n### [CVE-2026-81963](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nMicrosoft Windows Link Following Vulnerability: Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-59](https://cwe.mitre.org/data/definitions/59)| [CWE-284](https://cwe.mitre.org/data/definitions/284)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-08\n - Due Date: 2026-09-22\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-81963](https://nvd.nist.gov/vuln/detail/CVE-2026-81963)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nAdobe | Commerce and Magento\n\n\n\n\n\n### [CVE-2026-75650](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability: Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.\n\n\n\n\n\n\n\nRelated CWE: [CWE-1336](https://cwe.mitre.org/data/definitions/1336)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-08\n - Due Date: 2026-09-11\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://helpx.adobe.com/security/products/magento/apsb26-146.html](https://helpx.adobe.com/security/products/magento/apsb26-146.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-75650](https://nvd.nist.gov/vuln/detail/CVE-2026-75650)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nGoogle | Chromium V8\n\n\n\n\n\n### [CVE-2026-85046](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nGoogle Chromium V8 Type Confusion Vulnerability: Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\n\n\n\n\n\n\nRelated CWE: [CWE-843](https://cwe.mitre.org/data/definitions/843)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** No**\n\n\n\n\n - Date Added: 2026-09-04\n - Due Date: 2026-09-18\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html](https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-85046](https://nvd.nist.gov/vuln/detail/CVE-2026-85046)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSonicWall | SMA1000 Appliances\n\n\n\n\n\n### [CVE-2026-83549](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSonicWall SMA1000 Appliances OS Command Injection Vulnerability: SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-78](https://cwe.mitre.org/data/definitions/78)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-83549](https://nvd.nist.gov/vuln/detail/CVE-2026-83549)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSonicWall | SMA1000 Appliances\n\n\n\n\n\n### [CVE-2026-83548](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability: SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-918](https://cwe.mitre.org/data/definitions/918)| [CWE-441](https://cwe.mitre.org/data/definitions/441)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-83548](https://nvd.nist.gov/vuln/detail/CVE-2026-83548)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nSangoma | Switchvox\n\n\n\n\n\n### [CVE-2026-9586](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nSangoma Switchvox SQL Injection Vulnerability: Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.\n\n\n\n\n\n\n\nRelated CWE: [CWE-89](https://cwe.mitre.org/data/definitions/89)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026](https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-9586](https://nvd.nist.gov/vuln/detail/CVE-2026-9586)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nJFrog | Artifactory\n\n\n\n\n\n### [CVE-2026-82329](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nJFrog Artifactory Improper Authentication Vulnerability: JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.\n\n\n\n\n\n\n\nRelated CWE: [CWE-287](https://cwe.mitre.org/data/definitions/287)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\n[https://docs.jfrog.com/releases/docs/jfrog-security-advisories](https://docs.jfrog.com/releases/docs/jfrog-security-advisories) ; [https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases](https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-82329](https://nvd.nist.gov/vuln/detail/CVE-2026-82329)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nKestra | Kestra OSS\n\n\n\n\n\n### [CVE-2026-49869](https://www.cve.org/CVERecord?id=%5BREDACTED%5D)\n\n\n\nKestra OSS OS Command Injection Vulnerability: Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.\n\n\n\n\n\n\n\nRelated CWEs: [CWE-78](https://cwe.mitre.org/data/definitions/78)| [CWE-184](https://cwe.mitre.org/data/definitions/184)| [CWE-287](https://cwe.mitre.org/data/definitions/287)| [CWE-918](https://cwe.mitre.org/data/definitions/918)\n\n\n\n\n\n\n\n\n - Known To Be Used in Ransomware Campaigns? ** Unknown **\n - Forensic triage required per BOD-26-04: ** Yes**\n\n\n\n\n - Date Added: 2026-09-02\n - Due Date: 2026-09-05\n\n\n\n\n\n\n\n Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\n\n\n\n\nAdditional Notes\n\n\n\n\n\nThis vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: [https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx](https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx) ; BOD 26-04: [https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk) ; Forensics Triage Requirements: [https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk](https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk) ; [https://nvd.nist.gov/vuln/detail/CVE-2026-49869](https://nvd.nist.gov/vuln/detail/CVE-2026-49869)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n - Currently on page 1\n - [Page 2](?page=1)\n - [Page 3](?page=2)\n - [Page 4](?page=3)\n - [Page 5](?page=4)\n - [Page 6](?page=5)\n - [Page 7](?page=6)\n - [Page 8](?page=7)\n - [Page 9](?page=8)\n - …\n - [Go to next pageNext](?page=1)\n - [Go to last pageLast](?page=85)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n## Subscribe to the KEV Catalog Updates\n\n\n\nStay up to date on the latest known exploited vulnerabilities.\n\n [Subscribe Now](https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=%5BREDACTED%5D)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n [Return to top](#top)\n\n\n\n\n\n\n\n\n - [Topics](/topics)\n - [Spotlight](/spotlight)\n - [Resources & Tools](/resources-tools)\n - [News & Events](/news-events)\n - [Careers](/careers)\n - [About](/about)\n\n\n\n\n\n\n\n\n\n\n\n\n\n [Cybersecurity & Infrastructure Security Agency](/)\n\n\n\n\n - [Facebook](https://www.facebook.com/CISA)\n - [X](https://x.com/CISAgov)\n - [LinkedIn](https://www.linkedin.com/company/cybersecurity-and-infrastructure-security-agency)\n - [YouTube](https://www.youtube.com/@cisagov)\n - [Instagram](https://www.instagram.com/cisagov)\n - [RSS](/subscribe-updates-cisa)\n\n\n\n CISA Central [1-844-Say-CISA](tel:1-844-Say-CISA) [contact@cisa.dhs.gov](mailto:contact@cisa.dhs.gov)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nDHS Seal\n\n\n\n\n\nCISA.gov\n\n\n\nAn official website of the U.S. Department of Homeland Security\n\n\n\n\n\n\n - [About CISA](/about)\n - [Budget and Performance](https://www.dhs.gov/performance-financial-reports)\n - [DHS.gov](https://www.dhs.gov)\n - [FOIA Requests](https://www.dhs.gov/foia)\n - [No FEAR Act](/no-fear-act)\n - [Office of Inspector General](https://www.oig.dhs.gov/)\n - [Privacy Policy](/privacy-policy)\n - [Subscribe](https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=%5BREDACTED%5D)\n - [The White House](https://www.whitehouse.gov/)\n - [USA.gov](https://www.usa.gov/)\n - [Website Feedback](/forms/feedback)", "content_length": 74723, "content_type": "text/html", "description": "For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat", "status_code": 200, "success": true, "title": "Known Exploited Vulnerabilities Catalog | CISA", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}, "status": "completed", "tool_name": "web_fetch"}

web_fetch/042_recent_cisa_vulnerabilities-2

Checks

Tool Timing

Conversation

CISA KEV additions (Sep 4–11) · CISA Known Exploited Vulnerabilities catalog

Normalized evidence