CISA Adds Three Known Exploited Vulnerabilities to Catalog
2026-08-27T19:24:07Z•0ca6a90ddec6005a39ed21e646422c7b744b5325224b46ac769b26696df41af8
CVE-2015-3246CVE-2015-5287CVE-2019-1068CVE-2021-23758CVE-2022-0995CVE-2023-49105CVE-2026-21962CVE-2026-53362CVE-2026-60004CVE-2026-64849CVE-2026-66384CVE-2026-72529CVE-2026-72530CVE-2026-73570CVE-2026-8452Ajax.NET ProfessionalBOD 26-04CISACitrix NetScalerFCEBGiteaJFrog ArtifactoryKEVKnown Exploited VulnerabilitiesLinux KernelMLflowMicrosoft SQL ServerOracle WebLogicRed HatTrueConf ServerZimbraactive exploitationownCloudpatchingvulnerability management
What happened
CISA reports the addition of 15 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog between August 20 and 27, 2026, citing evidence of active exploitation. Affected products include ownCloud, Linux Kernel, JFrog Artifactory, Red Hat components, Microsoft SQL Server, Ajax.NET Professional, Citrix NetScaler, Gitea, Oracle WebLogic/HTTP Server, Zimbra, TrueConf Server, and MLflow. Organizations should prioritize remediation, assess internet-facing exposure, and investigate potential compromise, with FCEB agencies subject to BOD 26-04 requirements.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 0ca6a90ddec6005a39ed21e646422c7b744b5325224b46ac769b26696df41af8
- Enrichment time
- 2026-08-27T19:24:07Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.