Active-Exploitation

Fortinet FortiClient EMS Pre-Auth Bypass — "FortiBleed" (CVE-2026-35616) new KEV EPSS 91%CVE-2026-35616networkCRITICAL 9.1Patched2026-07-03Citrix NetScaler ADC/Gateway Pre-Auth SAML Memory Overread — "CitrixBleed"-style Leak (CVE-2026-8451) new EPSS 16%CVE-2026-8451networkHIGH 7.5Unverified2026-07-03Unauthenticated RCE in Mirasvit Full Page Cache Warmer for Magento 2 (CVE-2026-45247) new KEV EPSS 28%CVE-2026-45247webCRITICAL 9.3Unverified2026-07-01Unauthenticated RCE in Joomla Content Editor (JCE) Profile Import (CVE-2026-48907) new KEV EPSS 78%CVE-2026-48907webCRITICAL 10Patched2026-07-01Google Chromium V8 Out-of-Bounds Read/Write — Crash PoC (CVE-2026-11645) new KEVCVE-2026-11645webHIGH 8.8Unverified2026-07-01Cisco Unified CM WebDialer SSRF to Arbitrary File Write / RCE (CVE-2026-20230) new KEV EPSS 88%CVE-2026-20230networkCRITICAL 8.6Unverified2026-07-01Cisco Catalyst SD-WAN Manager Arbitrary File Write (CVE-2026-20262) new KEV EPSS 28%CVE-2026-20262networkMEDIUM 6.5Unverified2026-07-01GNU Inetutils telnetd Unauthenticated Root RCE via NEW-ENVIRON (CVE-2026-24061) new KEV EPSS 98%CVE-2026-24061networkCRITICAL 9.8Patched2026-06-30Ivanti Connect Secure Pre-Auth RCE (Stack Overflow) new KEV RW EPSS 100%CVE-2025-0282networkCRITICAL 9Unverified2026-05-17Fortinet FortiCloud SSO Authentication Bypass new KEV EPSS 69%CVE-2025-59718, CVE-2025-59719networkCRITICAL 9.8Unverified2026-05-17