Threat Intelligence

Vulnerability Advisories

9 Realms tracks the CISA Known Exploited Vulnerabilities catalog and surfaces the threats most relevant to your environment. Click any entry for our full advisory.

Internet Threat Level: Normal· SANS Internet Storm Center

Ransomware-associated only

1,665 entries in CISA KEV

CVE-2026-20349

+1d

Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Added Aug 11, 2026View Advisory →

CVE-2026-68820

+1d

Microsoft · Windows Ancillary Function Driver for WinSock

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Added Aug 11, 2026View Advisory →

CVE-2026-72898

+1d

Metabase · Metabase

Metabase SQL Injection Vulnerability

Added Aug 11, 2026View Advisory →

CVE-2026-8037

+5d

Progress · LoadMaster

Progress LoadMaster Command Injection Vulnerability

Added Aug 7, 2026View Advisory →

CVE-2026-63077

+7d

JetBrains · TeamCity

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

Added Aug 5, 2026View Advisory →

CVE-2026-18556

+8d

N-able · N-central

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added Aug 4, 2026View Advisory →

CVE-2026-34486

+8d

Apache · Tomcat

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Added Aug 4, 2026View Advisory →

CVE-2026-9198

+8d

IBM · Langflow

IBM Langflow Code Injection Vulnerability

Added Aug 4, 2026View Advisory →

CVE-2026-18577

+9d

N-able · N-central

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added Aug 3, 2026View Advisory →

CVE-2026-20316

+14d

Cisco · Secure Firewall Management Center (FMC)

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Added Jul 29, 2026View Advisory →

CVE-2025-68686

+16d

Fortinet · FortiOS

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Added Jul 27, 2026View Advisory →

CVE-2026-16812

+16d

Arista · VeloCloud Orchestrator

Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Added Jul 27, 2026View Advisory →

CVE-2026-16232

+21d

Check Point · SmartConsole

Check Point SmartConsole Improper Authentication Vulnerability

Added Jul 22, 2026View Advisory →

CVE-2026-50522

+21d

Microsoft · SharePoint

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Added Jul 22, 2026View Advisory →

CVE-2026-60137

+22d

WordPress · Core

WordPress Core SQL Injection Vulnerability

Added Jul 21, 2026View Advisory →

CVE-2026-63030

+22d

WordPress · Core

WordPress Core Interpretation Conflict Vulnerability

Added Jul 21, 2026View Advisory →

CVE-2026-0770

+22d

Langflow · Langflow

Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Added Jul 21, 2026View Advisory →

CVE-2021-27137

+22d

DD-WRT · DD-WRT

DD-WRT Stack-Based Buffer Overflow Vulnerability

Added Jul 21, 2026View Advisory →

CVE-2026-58644

+27d

Microsoft · SharePoint

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Added Jul 16, 2026View Advisory →

CVE-2026-25089

+27d

Fortinet · FortiSandbox

Fortinet FortiSandbox OS Command Injection Vulnerability

Added Jul 16, 2026View Advisory →

CVE-2026-39808

+27d

Fortinet · FortiSandbox

Fortinet FortiSandbox OS Command Injection Vulnerability

Added Jul 16, 2026View Advisory →

CVE-2026-46817

+28d

Oracle · E-Business Suite

Oracle E-Business Suite Improper Privilege Management Vulnerability

Added Jul 15, 2026View Advisory →

CVE-2023-4346

+28d

KNX Association · KNX Protocol Connection Authorization Option 1

KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

Added Jul 15, 2026View Advisory →

CVE-2026-56155

+29d

Microsoft · Active Directory Federation Services

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Added Jul 14, 2026View Advisory →

Page 1 of 70

Vulnerability data sourced from the CISA Known Exploited Vulnerabilities catalog. Threat level data from the SANS Internet Storm Center. Catalog contains 1,665 entries (version 2026.08.11).