CVEs published July 13 to July 19, 2026
2,695 CVEs were published Jul 13 to Jul 19, 2026, 289 of them critical. CISA added 10 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 2,695
- Critical
- 289
- Added to CISA KEV
- 10
- Busiest day
- Tue, Jul 14 (1,008)
- Quietest day
- Sat, Jul 18 (81)
- July 13, 2026336 CVEs · 49 critical
- July 14, 20261,008 CVEs · 74 critical
- July 15, 2026268 CVEs · 33 critical
- July 16, 2026247 CVEs · 35 critical
- July 17, 2026291 CVEs · 35 critical
- July 18, 202681 CVEs · 5 critical
- July 19, 2026464 CVEs · 58 critical
Added to CISA KEV 10
- CVE-2008-4128Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Serv
- CVE-2026-15409A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface.SonicWall SMA1000
- CVE-2026-15410Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance ManSonicWall SMA1000
- CVE-2026-56155Active Directory Federation Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-4346 KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked andKNX Association KNX Protocol Connection Authorization Option
- CVE-2026-46817Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).Oracle Payments
- CVE-2026-25089A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 thFortinet FortiSandbox
- CVE-2026-39808A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 thFortinet FortiSandbox
- CVE-2026-58644Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…