CISA Adds Two Known Exploited Vulnerabilities to Catalog

2026-08-31T15:24:04Z29299bbaf6fd5f861312a3448351711b3a0fefd71e78b2254cd2b285d4db5e54
CVE-2015-3246CVE-2015-5287CVE-2019-1068CVE-2021-23758CVE-2022-0995CVE-2023-49105CVE-2026-21962CVE-2026-53362CVE-2026-60004CVE-2026-66384CVE-2026-72529CVE-2026-72530CVE-2026-73570CVE-2026-81578CVE-2026-82078CVE-2026-8452Ajax.NETCISACitrix NetScalerGiteaJFrog ArtifactoryKEVKnown Exploited VulnerabilitiesLinux KernelMicrosoft SQL ServerOracle WebLogicPaperCutRed HatTrueConfZimbraactive exploitationownCloudpatch prioritizationvulnerability management

What happened

CISA alerts from August 21–31, 2026 announce the addition of 16 vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Affected products include PaperCut NG/MF, ownCloud, Linux Kernel, JFrog Artifactory, Red Hat components, Microsoft SQL Server, Ajax.NET Professional, Citrix NetScaler, Gitea, Oracle WebLogic/HTTP Server, Zimbra Collaboration Suite, and TrueConf Server. CISA urges rapid remediation, prioritization of exposed systems, and compromise assessment in accordance with risk-based vulnerability management and BOD 26-04 for FCEB||||

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
cisa_ncas_current_activity
Record identifier
29299bbaf6fd5f861312a3448351711b3a0fefd71e78b2254cd2b285d4db5e54
Enrichment time
2026-08-31T15:24:04Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.