cisa-kev
CISA KEVExtracts: CVE id, vendor, due date · metadata or bounded excerpt
Retention: D1 event history with canonical source link and deduplication metadata.
Access basis: Public endpoint; no project credential required.
Last ingested: 2026-08-26 · run status: success with data
- 2026-07-14CISA KEV: SonicWall / SMA1000 Appliances / SonicWall SMA1000 Appliances Code Injection Vulnerability
CVE: CVE-2026-15410 Vendor/project: SonicWall Product: SMA1000 Appliances Known ransomware campaign use: Unknown Due date: 2026-07-17 CWE: CWE-94 SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote aut
CVE: CVE-2026-15409 Vendor/project: SonicWall Product: SMA1000 Appliances Known ransomware campaign use: Unknown Due date: 2026-07-17 CWE: CWE-918 SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker t
CVE: CVE-2026-56164 Vendor/project: Microsoft Product: SharePoint Server Known ransomware campaign use: Unknown Due date: 2026-07-17 CWE: CWE-306 Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to ele
CVE: CVE-2026-56155 Vendor/project: Microsoft Product: Active Directory Federation Services Known ransomware campaign use: Unknown Due date: 2026-07-28 CWE: CWE-1220 Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerabilit