New that day
- criticalpatchedexploited SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. Can be chained with CVE-2026-15410. Added to CISA KEV on 2026-07-14 (federal deadline 2026-07-17).
- highpatchedexploited Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally. Added to CISA KEV on 2026-07-14 (federal deadline 2026-07-28).
- highpatchedexploited Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. Added to CISA KEV on 2026-07-14 (federal deadline 2026-07-17).