CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reports multiple additions to its Known Exploited Vulnerabilities Catalog in July 2026, covering Fortinet, Arista VeloCloud, Check Point, Microsoft SharePoint and AD FS, SonicWall, WordPress, Langflow, DD-WRT, Oracle E-Business Suite, and KNX products. The entries are supported by evidence of active exploitation, and CISA specifically warns that SharePoint vulnerabilities enable unauthorized access, remote code execution, persistence, IIS machine-key theft, deserialization, and malware deployment. Organizations should prioritize patching, hardening, exposure reduction, and compromise-hunt