Senserva: vulnerabilities exploited this week (CISA KEV additions, all vendors) https://senserva.com/exploited-this-week.html Every vulnerability newly confirmed exploited in the wild: CISA KEV catalog additions from the last 30 days, all vendors, Microsoft included, with CVSS and ransomware flags. From Senserva. Use is subject to the Senserva EULA: https://senserva.com/eula.html; rules at https://senserva.com/feeds.html. en-us Provided by Senserva.com Provided by Senserva.com. Free to use; please credit Senserva.com and link back to https://senserva.com/. hello@senserva.com (Senserva) Thu, 23 Jul 2026 00:00:00 GMT 720 Check Point SmartConsole: Check Point SmartConsole Improper Authentication Vulnerability https://senserva.com/cve/CVE-2026-16232.html etw-CVE-2026-16232 Wed, 22 Jul 2026 00:00:00 GMT Exploited CVE-2026-16232, CVSS 9.1. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-22. Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability https://senserva.com/cve/CVE-2026-50522.html etw-CVE-2026-50522 Wed, 22 Jul 2026 00:00:00 GMT Exploited CVE-2026-50522, CVSS n/a. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-22. DD-WRT DD-WRT: DD-WRT Stack-Based Buffer Overflow Vulnerability https://senserva.com/cve/CVE-2021-27137.html etw-CVE-2021-27137 Tue, 21 Jul 2026 00:00:00 GMT Exploited CVE-2021-27137, CVSS 8.1. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-21. Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability https://senserva.com/cve/CVE-2026-0770.html etw-CVE-2026-0770 Tue, 21 Jul 2026 00:00:00 GMT Exploited CVE-2026-0770, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-21. WordPress Core: WordPress Core SQL Injection Vulnerability https://senserva.com/cve/CVE-2026-60137.html etw-CVE-2026-60137 Tue, 21 Jul 2026 00:00:00 GMT Exploited CVE-2026-60137, CVSS 5.9. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-21. WordPress Core: WordPress Core Interpretation Conflict Vulnerability https://senserva.com/cve/CVE-2026-63030.html etw-CVE-2026-63030 Tue, 21 Jul 2026 00:00:00 GMT Exploited CVE-2026-63030, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-21. Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability https://senserva.com/cve/CVE-2026-25089.html etw-CVE-2026-25089 Thu, 16 Jul 2026 00:00:00 GMT Exploited CVE-2026-25089, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-16. Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability https://senserva.com/cve/CVE-2026-39808.html etw-CVE-2026-39808 Thu, 16 Jul 2026 00:00:00 GMT Exploited CVE-2026-39808, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-16. Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability https://senserva.com/cve/CVE-2026-58644.html etw-CVE-2026-58644 Thu, 16 Jul 2026 00:00:00 GMT Exploited CVE-2026-58644, CVSS n/a. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-16. KNX Association KNX Protocol Connection Authorization Option 1: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability https://senserva.com/cve/CVE-2023-4346.html etw-CVE-2023-4346 Wed, 15 Jul 2026 00:00:00 GMT Exploited CVE-2023-4346, CVSS 7.5. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-15. Oracle E-Business Suite: Oracle E-Business Suite Improper Privilege Management Vulnerability https://senserva.com/cve/CVE-2026-46817.html etw-CVE-2026-46817 Wed, 15 Jul 2026 00:00:00 GMT Exploited CVE-2026-46817, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-15. SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability https://senserva.com/cve/CVE-2026-15409.html etw-CVE-2026-15409 Tue, 14 Jul 2026 00:00:00 GMT Exploited CVE-2026-15409, CVSS 10. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-14. SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Code Injection Vulnerability https://senserva.com/cve/CVE-2026-15410.html etw-CVE-2026-15410 Tue, 14 Jul 2026 00:00:00 GMT Exploited CVE-2026-15410, CVSS 7.2. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-14. Microsoft Active Directory Federation Services: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability https://senserva.com/cve/CVE-2026-56155.html etw-CVE-2026-56155 Tue, 14 Jul 2026 00:00:00 GMT Exploited CVE-2026-56155, CVSS n/a. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-14. Microsoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability https://senserva.com/cve/CVE-2026-56164.html etw-CVE-2026-56164 Tue, 14 Jul 2026 00:00:00 GMT Exploited CVE-2026-56164, CVSS n/a. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-14. Cisco IOS: Cisco IOS Cross-Site Request Forgery Vulnerability https://senserva.com/cve/CVE-2008-4128.html etw-CVE-2008-4128 Mon, 13 Jul 2026 00:00:00 GMT Exploited CVE-2008-4128, CVSS 4.3. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-13. iCagenda iCagenda: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability https://senserva.com/cve/CVE-2026-48939.html etw-CVE-2026-48939 Fri, 10 Jul 2026 00:00:00 GMT Exploited CVE-2026-48939, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-10. Balbooa Forms: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability https://senserva.com/cve/CVE-2026-56291.html etw-CVE-2026-56291 Fri, 10 Jul 2026 00:00:00 GMT Exploited CVE-2026-56291, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-10. Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability https://senserva.com/cve/CVE-2026-48282.html etw-CVE-2026-48282 Tue, 07 Jul 2026 00:00:00 GMT Exploited CVE-2026-48282, CVSS 10. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-07. JoomShaper SP Page Builder: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability https://senserva.com/cve/CVE-2026-48908.html etw-CVE-2026-48908 Tue, 07 Jul 2026 00:00:00 GMT Exploited CVE-2026-48908, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-07. Langflow Langflow: Langflow Authorization Bypass Through User-Controlled Key Vulnerability https://senserva.com/cve/CVE-2026-55255.html etw-CVE-2026-55255 Tue, 07 Jul 2026 00:00:00 GMT Exploited CVE-2026-55255, CVSS 9.9. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-07. Joomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerability https://senserva.com/cve/CVE-2026-56290.html etw-CVE-2026-56290 Tue, 07 Jul 2026 00:00:00 GMT Exploited CVE-2026-56290, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-07. Microsoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability https://senserva.com/cve/CVE-2026-45659.html etw-CVE-2026-45659 Wed, 01 Jul 2026 00:00:00 GMT Exploited CVE-2026-45659, CVSS n/a. Newly confirmed exploited in the wild (CISA KEV), added 2026-07-01. SimpleHelp SimpleHelp: SimpleHelp Authentication Bypass Vulnerability https://senserva.com/cve/CVE-2026-48558.html etw-CVE-2026-48558 Mon, 29 Jun 2026 00:00:00 GMT Exploited CVE-2026-48558, CVSS 10. Newly confirmed exploited in the wild (CISA KEV), added 2026-06-29. PTC Windchill and FlexPLM: PTC Windchill and FlexPLM Improper Input Validation Vulnerability https://senserva.com/cve/CVE-2026-12569.html etw-CVE-2026-12569 Thu, 25 Jun 2026 00:00:00 GMT Exploited CVE-2026-12569, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-06-25. Cisco Unified Communications Manager: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability https://senserva.com/cve/CVE-2026-20230.html etw-CVE-2026-20230 Thu, 25 Jun 2026 00:00:00 GMT Exploited CVE-2026-20230, CVSS 8.6. Newly confirmed exploited in the wild (CISA KEV), added 2026-06-25. Lantronix EDS5000: Lantronix EDS5000 Code Injection Vulnerability https://senserva.com/cve/CVE-2025-67038.html etw-CVE-2025-67038 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2025-67038, CVSS 9.8. Newly confirmed exploited in the wild (CISA KEV), added 2026-06-23. Ubiquiti UniFi OS: Ubiquiti UniFi OS Improper Access Control Vulnerability https://senserva.com/cve/CVE-2026-34908.html etw-CVE-2026-34908 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34908, CVSS 10. Newly confirmed exploited in the wild (CISA KEV), added 2026-06-23. Ubiquiti UniFi OS: Ubiquiti UniFi OS Path Traversal Vulnerability https://senserva.com/cve/CVE-2026-34909.html etw-CVE-2026-34909 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34909, CVSS 10. Newly confirmed exploited in the wild (CISA KEV), added 2026-06-23. Ubiquiti UniFi OS: Ubiquiti UniFi OS Improper Input Validation Vulnerability https://senserva.com/cve/CVE-2026-34910.html etw-CVE-2026-34910 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34910, CVSS 10. Newly confirmed exploited in the wild (CISA KEV), added 2026-06-23.