CISA Adds Three Known Exploited Vulnerabilities to Catalog
2026-08-31T13:24:00Z•3f3232feacc75c7106bede34e56318236968b4d677679f70723e2053cd547440
CVE-2015-3246CVE-2015-5287CVE-2019-1068CVE-2021-23758CVE-2022-0995CVE-2023-49105CVE-2026-21962CVE-2026-53362CVE-2026-60004CVE-2026-64849CVE-2026-66384CVE-2026-72529CVE-2026-72530CVE-2026-73570CVE-2026-8452CISA KEVCitrix NetScalerGiteaJFrog ArtifactoryLinux KernelMLflowOracle WebLogicTrueConfZimbraactive exploitationauthentication bypasscode injectiondeserializationknown exploited vulnerabilityownCloudpath traversalprivilege escalationpublic-facing applicationsremote code executionserver-side request forgeryurgent patchingvulnerability management
What happened
CISA reports active exploitation and adds 15 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog during August 20–27, 2026. The affected products include ownCloud, Linux Kernel, JFrog Artifactory, Red Hat components, Microsoft SQL Server, Ajax.NET Professional, Citrix NetScaler, Gitea, Oracle WebLogic/HTTP Server, Zimbra, TrueConf Server, and MLflow. Organizations should prioritize urgent remediation, restrict public exposure, and investigate systems for possible compromise before patching.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 3f3232feacc75c7106bede34e56318236968b4d677679f70723e2053cd547440
- Enrichment time
- 2026-08-31T13:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.