July 2026

3 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-20316 Exploited · Ransomware EPSS 35%

  Cisco Secure Firewall Management Center Software Static Credential Vulnerability

  A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.…

  Cisco Cisco Secure Firewall Management Center (FMC) Network devices
  Jul 29, 2026

  KEV Jul 29, 2026
• Medium 5.9
  CVE-2026-60137 Exploited Public exploit

  WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

  WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

  WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  Jul 17, 2026

  KEV Jul 21, 2026
• Medium 5.3
  CVE-2026-56164 Exploited Public exploit

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Jul 14, 2026

  KEV Jul 14, 2026