CVE Exploit Alerts

CVE exploit alerts published automatically whenever CISA adds a new vulnerability to the KEV catalog. Each alert includes CVSS scoring, EPSS exploitation probability, MITRE ATT&CK mapping, CWE-specific detection guidance, and a 3-tier recommended action checklist. No account required.

CVE-2026-39808 — Fortinet FortiSandbox: OS Command Injection | CVSS 9.8 CRITICAL

by

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 49%  ·  Fortinet FortiSandbox

Read more

CVE-2026-25089 — Fortinet FortiSandbox: OS Command Injection | CVSS 9.8 CRITICAL

by

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 23%  ·  Fortinet FortiSandbox

Read more

CVE-2026-58644 — Microsoft SharePoint: Insecure Deserialization | CVSS 9.8 CRITICAL

by

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 1%  ·  Microsoft SharePoint

Read more

CVE-2023-4346 — KNX Association KNX Protocol Connection Authorization Option 1 | CVSS 7.5 HIGH

by

HIGH

CVSS 7.5 HIGH  ·  EPSS 0%  ·  KNX Association KNX Protocol Connection Authorization Option 1

Read more

CVE-2026-46817 — Oracle E-Business Suite: Privilege Mismanagement | CVSS 9.8 CRITICAL

by

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 1%  ·  Oracle E-Business Suite

Read more

CVE-2026-15410 — SonicWall SMA1000 Appliances: Code Injection | CVSS 7.2 HIGH

by

HIGH

CVSS 7.2 HIGH  ·  EPSS N/A  ·  SonicWall SMA1000 Appliances

Read more

CVE-2026-15409 — SonicWall SMA1000 Appliances | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS N/A  ·  SonicWall SMA1000 Appliances

Read more

CVE-2026-56155 — Microsoft Active Directory Federation Services | CVSS 7.8 HIGH

by

HIGH

CVSS 7.8 HIGH  ·  EPSS N/A  ·  Microsoft Active Directory Federation Services

Read more

CVE-2026-48939 — iCagenda iCagenda: Unrestricted File Upload | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 1%  ·  iCagenda iCagenda

Read more

CVE-2026-56291 — Balbooa Forms: Unrestricted File Upload | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 0%  ·  Balbooa Forms

Read more