Week 29, 2026 — Jul 13 – Jul 19, 2026
Everything the 24 aggregated CERT, PSIRT and vulnerability-database feeds published in this ISO week, condensed: what was added to the CISA KEV catalog, which advisories matter most and which products were hit. Daily detail lives in the daily briefings.
Added to the CISA KEV catalog
- criticalCVE-2026-58644added 2026-07-16 · CVSS 9.8 · public exploit code
- criticalCVE-2026-39808added 2026-07-16 · public exploit code
- criticalCVE-2026-25089added 2026-07-16 · public exploit code
- criticalCVE-2023-4346added 2026-07-15
- criticalCVE-2026-46817added 2026-07-15 · public exploit code
- criticalCVE-2026-15409added 2026-07-14 · CVSS 10 · public exploit code
- criticalCVE-2026-56164added 2026-07-14 · CVSS 5.3 · public exploit code
- criticalCVE-2026-56155added 2026-07-14 · CVSS 7.8
- criticalCVE-2026-15410added 2026-07-14 · CVSS 7.2 · public exploit code
- criticalCVE-2008-4128added 2026-07-13 · public exploit code
Notable advisories
CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability
Fortinet security advisory (AV26-351) – Update 2
Fortinet security advisory (AV26-568) – Update 1
CVE-2026-39808: Fortinet FortiSandbox OS Command Injection Vulnerability
CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability
CVE-2026-58644: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Oracle security advisory (AV26-526) – Update 2
AL26-017 - Critical vulnerabilities impacting Microsoft SharePoint Server – CVE-2026-56164, CVE-2026-55040 and CVE-2026-58644
CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability
SonicWall security advisory (AV26-699) – Update 1
Most-affected products
Volume by source
Other weeks
Don't wait a week. The daily briefing lands in your inbox every morning after 06:00 UTC — subscribe free, or watch specific products for instant advisory alerts.