CISA Adds Two Known Exploited Vulnerabilities to Catalog
2026-08-31T15:24:04Z•29299bbaf6fd5f861312a3448351711b3a0fefd71e78b2254cd2b285d4db5e54
CVE-2015-3246CVE-2015-5287CVE-2019-1068CVE-2021-23758CVE-2022-0995CVE-2023-49105CVE-2026-21962CVE-2026-53362CVE-2026-60004CVE-2026-66384CVE-2026-72529CVE-2026-72530CVE-2026-73570CVE-2026-81578CVE-2026-82078CVE-2026-8452Ajax.NETCISACitrix NetScalerGiteaJFrog ArtifactoryKEVKnown Exploited VulnerabilitiesLinux KernelMicrosoft SQL ServerOracle WebLogicPaperCutRed HatTrueConfZimbraactive exploitationownCloudpatch prioritizationvulnerability management
What happened
CISA alerts from August 21–31, 2026 announce the addition of 16 vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Affected products include PaperCut NG/MF, ownCloud, Linux Kernel, JFrog Artifactory, Red Hat components, Microsoft SQL Server, Ajax.NET Professional, Citrix NetScaler, Gitea, Oracle WebLogic/HTTP Server, Zimbra Collaboration Suite, and TrueConf Server. CISA urges rapid remediation, prioritization of exposed systems, and compromise assessment in accordance with risk-based vulnerability management and BOD 26-04 for FCEB||||
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 29299bbaf6fd5f861312a3448351711b3a0fefd71e78b2254cd2b285d4db5e54
- Enrichment time
- 2026-08-31T15:24:04Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.