{"source":"cisa-kev","name":"CISA KEV","kind":"widget","via":"native","records":[{"id":"CVE-2026-46817","title":"Oracle E-Business Suite Improper Privilege Management Vulnerability","subtitle":"Oracle","value":"CVE-2026-46817","href":""},{"id":"CVE-2023-4346","title":"KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability","subtitle":"KNX Association","value":"CVE-2023-4346","href":""},{"id":"CVE-2026-56155","title":"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ","subtitle":"Microsoft","value":"CVE-2026-56155","href":""},{"id":"CVE-2026-56164","title":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","subtitle":"Microsoft","value":"CVE-2026-56164","href":""},{"id":"CVE-2026-15409","title":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","subtitle":"SonicWall","value":"CVE-2026-15409","href":""},{"id":"CVE-2026-15410","title":"SonicWall SMA1000 Appliances Code Injection Vulnerability","subtitle":"SonicWall","value":"CVE-2026-15410","href":""},{"id":"CVE-2008-4128","title":"Cisco IOS Cross-Site Request Forgery Vulnerability","subtitle":"Cisco","value":"CVE-2008-4128","href":""},{"id":"CVE-2026-56291","title":"Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability","subtitle":"Balbooa","value":"CVE-2026-56291","href":""},{"id":"CVE-2026-48939","title":"iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability","subtitle":"iCagenda","value":"CVE-2026-48939","href":""},{"id":"CVE-2026-48908","title":"JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability","subtitle":"JoomShaper","value":"CVE-2026-48908","href":""},{"id":"CVE-2026-55255","title":"Langflow Authorization Bypass Through User-Controlled Key Vulnerability","subtitle":"Langflow","value":"CVE-2026-55255","href":""},{"id":"CVE-2026-56290","title":"Joomlack Page Builder Improper Access Control Vulnerability","subtitle":"Joomlack","value":"CVE-2026-56290","href":""},{"id":"CVE-2026-48282","title":"Adobe ColdFusion Path Traversal Vulnerability","subtitle":"Adobe","value":"CVE-2026-48282","href":""},{"id":"CVE-2026-45659","title":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","subtitle":"Microsoft","value":"CVE-2026-45659","href":""},{"id":"CVE-2026-48558","title":"SimpleHelp Authentication Bypass Vulnerability","subtitle":"SimpleHelp ","value":"CVE-2026-48558","href":""},{"id":"CVE-2026-12569","title":"PTC Windchill and FlexPLM Improper Input Validation Vulnerability","subtitle":"PTC","value":"CVE-2026-12569","href":""},{"id":"CVE-2026-20230","title":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","subtitle":"Cisco","value":"CVE-2026-20230","href":""},{"id":"CVE-2025-67038","title":"Lantronix EDS5000 Code Injection Vulnerability","subtitle":"Lantronix","value":"CVE-2025-67038","href":""},{"id":"CVE-2026-34910","title":"Ubiquiti UniFi OS Improper Input Validation Vulnerability","subtitle":"Ubiquiti","value":"CVE-2026-34910","href":""},{"id":"CVE-2026-34909","title":"Ubiquiti UniFi OS Path Traversal Vulnerability","subtitle":"Ubiquiti","value":"CVE-2026-34909","href":""}],"count":20,"generated_at":"2026-07-17T06:16:42.405Z","cached":true}