Threat Intelligence

Vulnerability Advisories

9 Realms tracks the CISA Known Exploited Vulnerabilities catalog and surfaces the threats most relevant to your environment. Click any entry for our full advisory.

Internet Threat Level: Normal· SANS Internet Storm Center

Ransomware-associated only

1,647 entries in CISA KEV

CVE-2026-58644

+4d

Microsoft · SharePoint

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Added Jul 16, 2026View Advisory →

CVE-2026-25089

+4d

Fortinet · FortiSandbox

Fortinet FortiSandbox OS Command Injection Vulnerability

Added Jul 16, 2026View Advisory →

CVE-2026-39808

+4d

Fortinet · FortiSandbox

Fortinet FortiSandbox OS Command Injection Vulnerability

Added Jul 16, 2026View Advisory →

CVE-2026-46817

+5d

Oracle · E-Business Suite

Oracle E-Business Suite Improper Privilege Management Vulnerability

Added Jul 15, 2026View Advisory →

CVE-2023-4346

+5d

KNX Association · KNX Protocol Connection Authorization Option 1

KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

Added Jul 15, 2026View Advisory →

CVE-2026-56155

+6d

Microsoft · Active Directory Federation Services

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Added Jul 14, 2026View Advisory →

CVE-2026-56164

+6d

Microsoft · SharePoint Server

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Added Jul 14, 2026View Advisory →

CVE-2026-15409

+6d

SonicWall · SMA1000 Appliances

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

Added Jul 14, 2026View Advisory →

CVE-2026-15410

+6d

SonicWall · SMA1000 Appliances

SonicWall SMA1000 Appliances Code Injection Vulnerability

Added Jul 14, 2026View Advisory →

CVE-2008-4128

+7d

Cisco · IOS

Cisco IOS Cross-Site Request Forgery Vulnerability

Added Jul 13, 2026View Advisory →

CVE-2026-56291

+10d

Balbooa · Forms

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Added Jul 10, 2026View Advisory →

CVE-2026-48939

+10d

iCagenda · iCagenda

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

Added Jul 10, 2026View Advisory →

CVE-2026-48908

+13d

JoomShaper · SP Page Builder

JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

Added Jul 7, 2026View Advisory →

CVE-2026-55255

+13d

Langflow · Langflow

Langflow Authorization Bypass Through User-Controlled Key Vulnerability

Added Jul 7, 2026View Advisory →

CVE-2026-56290

+13d

Joomlack · Page Builder

Joomlack Page Builder Improper Access Control Vulnerability

Added Jul 7, 2026View Advisory →

CVE-2026-48282

+13d

Adobe · ColdFusion

Adobe ColdFusion Path Traversal Vulnerability

Added Jul 7, 2026View Advisory →

CVE-2026-45659

+19d

Microsoft · SharePoint Server

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Added Jul 1, 2026View Advisory →

CVE-2026-48558

+21d

SimpleHelp · SimpleHelp

SimpleHelp Authentication Bypass Vulnerability

Added Jun 29, 2026View Advisory →

CVE-2026-12569

+25d

PTC · Windchill and FlexPLM

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

Added Jun 25, 2026View Advisory →

CVE-2026-20230

+25d

Cisco · Unified Communications Manager

Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

Added Jun 25, 2026View Advisory →

CVE-2025-67038

+27d

Lantronix · EDS5000

Lantronix EDS5000 Code Injection Vulnerability

Added Jun 23, 2026View Advisory →

CVE-2026-34910

+27d

Ubiquiti · UniFi OS

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Added Jun 23, 2026View Advisory →

CVE-2026-34909

+27d

Ubiquiti · UniFi OS

Ubiquiti UniFi OS Path Traversal Vulnerability

Added Jun 23, 2026View Advisory →

CVE-2026-34908

+27d

Ubiquiti · UniFi OS

Ubiquiti UniFi OS Improper Access Control Vulnerability

Added Jun 23, 2026View Advisory →

Page 1 of 69

Vulnerability data sourced from the CISA Known Exploited Vulnerabilities catalog. Threat level data from the SANS Internet Storm Center. Catalog contains 1,647 entries (version 2026.07.16).