Skip to content

Data collected

CVEs Live

CVEs added to CISA KEV in August 2026

14 pages are kept for entries CISA added to the Known Exploited Vulnerabilities catalog in August 2026, newest first. Entries marked Archived record are no longer in the catalog and show the data as last seen.

Build snapshot collected · KEV catalog 2026.10.21 · EPSS of 21 Oct 2026 · not a live feed: collected once, at build time

  1. CVE-2026-81578

    PaperCut · NG/MF

    PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

    added 31 Aug 2026 · EPSS 85.6% · last seen 22 Oct 2026

  2. CVE-2026-82078

    PaperCut · NG/MF

    PaperCut NG/MF Unsafe Reflection Vulnerability

    added 31 Aug 2026 · EPSS 63.5% · last seen 22 Oct 2026

  3. CVE-2023-49105

    ownCloud · ownCloud

    ownCloud Improper Authentication Vulnerability

    added 27 Aug 2026 · EPSS 43.2% · last seen 22 Oct 2026

  4. CVE-2026-53362

    Linux · Kernel

    Linux Kernel Unspecified Vulnerability

    added 27 Aug 2026 · EPSS 0.71% · last seen 22 Oct 2026

  5. CVE-2026-66384

    JFrog · Artifactory

    JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

    added 27 Aug 2026 · EPSS 0.66% · last seen 22 Oct 2026

  6. CVE-2021-23758

    Ajax.NET Professional · Ajax.NET Professional

    Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

    added 26 Aug 2026 · EPSS 82.6% · last seen 22 Oct 2026

  7. CVE-2019-1068

    Microsoft · SQL Server

    Microsoft SQL Server Remote Code Execution Vulnerability

    added 26 Aug 2026 · EPSS 57.3% · last seen 22 Oct 2026

  8. CVE-2022-0995

    Linux · Kernel

    Linux Kernel Out-of-Bounds Write Vulnerability

    added 26 Aug 2026 · EPSS 8.86% · last seen 22 Oct 2026

  9. CVE-2015-3246

    Red Hat · Libuser

    Red Hat Libuser Race Condition Vulnerability

    added 26 Aug 2026 · EPSS 8.50% · last seen 22 Oct 2026

  10. CVE-2015-5287

    Red Hat · Automatic Bug Reporting Tool

    Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

    added 26 Aug 2026 · EPSS 5.00% · last seen 22 Oct 2026

  11. CVE-2026-8452

    Citrix · NetScaler ADC and NetScaler Gateway

    Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    added 26 Aug 2026 · EPSS 1.01% · last seen 22 Oct 2026

  12. CVE-2026-60004

    Gitea · Gitea

    Gitea Code Injection Vulnerability

    added 25 Aug 2026 · EPSS 24.0% · last seen 22 Oct 2026

  13. CVE-2026-21962

    Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in

    Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

    added 24 Aug 2026 · EPSS 73.2% · last seen 22 Oct 2026

  14. CVE-2026-73570

    Synacor · Zimbra Collaboration Suite (ZCS)

    Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

    added 21 Aug 2026 · EPSS 71.7% · last seen 22 Oct 2026

Other months

Questions

How many archived entries were added to KEV in August 2026?

14 entry pages are kept for August 2026. The month is the date CISA added the entry to the Known Exploited Vulnerabilities catalog.

Are archived pages up to date?

An entry that CISA still lists is refreshed on every collection. An entry marked "Archived record" has left the catalog and shows what was published when it was last seen.

Related sections