CISA Adds One Known Exploited Vulnerability to Catalog

CISA advisories from July 2026 report active exploitation of multiple vulnerabilities added to the Known Exploited Vulnerabilities catalog, affecting Cisco Secure Firewall Management Center, Fortinet FortiOS/FortiSandbox, Arista VeloCloud Orchestrator, Check Point SmartConsole, Microsoft SharePoint, DD-WRT, Langflow, WordPress, KNX, and Oracle E-Business Suite. A related SharePoint alert describes remote code execution, IIS machine-key theft, deserialization, persistence, and malware deployment. Organizations should prioritize urgent remediation, restrict exposure, and investigate affected on‑