{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 13 to 19 July 2026 (week 29)","summary":"In the week of 13 to 19 July 2026, 10 vulnerabilities were newly recorded as exploited in the wild, 10 of them critical. The technology hit most was Fortinet FortiSandbox (2), followed by Fortinet FortiSandbox PaaS (2) and Microsoft SharePoint Enterprise Server 2016 (2).","url":"https://junglewise.ai/threats/exploited/2026-07-13","json_url":"https://junglewise.ai/threats/exploited/2026-07-13.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-07-13","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":10,"period":{"end":"2026-07-19","start":"2026-07-13"},"critical":10,"generated_at":"2026-10-02T19:24:09.297469+00:00","technologies":[{"hub":true,"name":"Fortinet FortiSandbox","slug":"fortisandbox","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/fortisandbox"},{"hub":true,"name":"Fortinet FortiSandbox PaaS","slug":"fortisandbox-paas","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/fortisandbox-paas"},{"hub":true,"name":"Microsoft SharePoint Enterprise Server 2016","slug":"sharepoint-enterprise-server-2016","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/sharepoint-enterprise-server-2016"},{"hub":true,"name":"Microsoft SharePoint Server 2019","slug":"sharepoint-server-2019","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/sharepoint-server-2019"},{"hub":true,"name":"Microsoft SharePoint Server Subscription Edition","slug":"sharepoint-server-subscription-edition","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/sharepoint-server-subscription-edition"},{"hub":false,"name":"SonicWall SMA 1000 Series","slug":"sma-1000-series","vulnerabilities":2},{"hub":true,"name":"SonicWall SMA1000 Appliances","slug":"sma1000-appliances","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/sma1000-appliances"},{"hub":false,"name":"Cisco 871 Integrated Services Router","slug":"871-integrated-services-router","vulnerabilities":1},{"hub":true,"name":"Cisco IOS","slug":"ios","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/ios"},{"hub":true,"name":"Fortinet FortiSandbox Cloud","slug":"fortisandbox-cloud","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/fortisandbox-cloud"},{"hub":false,"name":"Knx Association KNX Protocol","slug":"knx-protocol","vulnerabilities":1},{"hub":false,"name":"Knx Association Knx Protocol Connection Authorization Option 1","slug":"knx-protocol-connection-authorization-option-1","vulnerabilities":1},{"hub":true,"name":"Microsoft Active Directory Federation Services","slug":"active-directory-federation-services","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/active-directory-federation-services"},{"hub":true,"name":"Microsoft SharePoint","slug":"sharepoint","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/sharepoint"},{"hub":true,"name":"Microsoft Sharepoint-Server","slug":"sharepoint-server","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/sharepoint-server"}],"vulnerabilities":[{"cve":"CVE-2026-58644","cvss":9.8,"epss":0.013,"slug":"cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted","title":"Microsoft SharePoint remote code execution via untrusted deserialization","severity":"critical","exploited":true,"published_at":"2026-07-14T17:17:14.257+00:00","technologies":[{"hub":true,"name":"Microsoft SharePoint","slug":"sharepoint","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft SharePoint Enterprise Server 2016","slug":"sharepoint-enterprise-server-2016","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft SharePoint Server 2019","slug":"sharepoint-server-2019","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft SharePoint Server Subscription Edition","slug":"sharepoint-server-subscription-edition","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-07-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted"},{"cve":"CVE-2026-25089","cvss":9.8,"epss":0.2339,"slug":"cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui","title":"Fortinet FortiSandbox OS command injection in Web UI","severity":"critical","exploited":true,"published_at":"2026-06-09T16:16:39.943+00:00","technologies":[{"hub":true,"name":"Fortinet FortiSandbox","slug":"fortisandbox","vendor":{"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiSandbox Cloud","slug":"fortisandbox-cloud","vendor":{"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiSandbox PaaS","slug":"fortisandbox-paas","vendor":{"name":"Fortinet","slug":"fortinet"}}],"exploited_since":"2026-07-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui"},{"cve":"CVE-2026-39808","cvss":9.8,"epss":0.4867,"slug":"cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint","title":"Fortinet FortiSandbox OS command injection in API endpoint","severity":"critical","exploited":true,"published_at":"2026-04-14T16:16:44.86+00:00","technologies":[{"hub":true,"name":"Fortinet FortiSandbox","slug":"fortisandbox","vendor":{"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiSandbox PaaS","slug":"fortisandbox-paas","vendor":{"name":"Fortinet","slug":"fortinet"}}],"exploited_since":"2026-07-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint"},{"cve":"CVE-2023-4346","cvss":7.5,"epss":0.0048,"slug":"cve-2023-4346-knx-association-knx-protocol-account-lockout-in-connection","title":"KNX Association KNX Protocol account lockout in Connection Authorization Option 1","severity":"critical","exploited":true,"published_at":"2026-07-15T00:00:00+00:00","technologies":[{"hub":false,"name":"Knx Association KNX Protocol","slug":"knx-protocol","vendor":{"name":"Knx Association","slug":"knx-association"}},{"hub":false,"name":"Knx Association Knx Protocol Connection Authorization Option 1","slug":"knx-protocol-connection-authorization-option-1","vendor":{"name":"Knx Association","slug":"knx-association"}}],"exploited_since":"2026-07-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4346-knx-association-knx-protocol-account-lockout-in-connection"},{"cve":"CVE-2026-46817","cvss":9.8,"epss":0.0068,"slug":"cve-2026-46817-oracle-e-business-suite-remote-compromise-in-oracle-payments","title":"Oracle E-Business Suite remote compromise in Oracle Payments","severity":"critical","exploited":true,"published_at":"2026-05-28T21:16:31.503+00:00","technologies":[{"hub":true,"name":"Oracle E-Business Suite","slug":"e-business-suite","vendor":{"name":"Oracle","slug":"oracle"}},{"hub":true,"name":"Oracle Payments","slug":"payments","vendor":{"name":"Oracle","slug":"oracle"}}],"exploited_since":"2026-07-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-46817-oracle-e-business-suite-remote-compromise-in-oracle-payments"},{"cve":"CVE-2026-15410","slug":"cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console","title":"SonicWall SMA1000 code injection in Appliance Management Console","severity":"critical","exploited":true,"published_at":"2026-07-14T20:16:56.903+00:00","technologies":[{"hub":false,"name":"SonicWall SMA 1000 Series","slug":"sma-1000-series","vendor":{"name":"SonicWall","slug":"sonicwall"}},{"hub":true,"name":"SonicWall SMA1000 Appliances","slug":"sma1000-appliances","vendor":{"name":"SonicWall","slug":"sonicwall"}}],"exploited_since":"2026-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console"},{"cve":"CVE-2026-15409","slug":"cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface","title":"SonicWall SMA1000 SSRF in Work Place interface","severity":"critical","exploited":true,"published_at":"2026-07-14T20:16:56.783+00:00","technologies":[{"hub":false,"name":"SonicWall SMA 1000 Series","slug":"sma-1000-series","vendor":{"name":"SonicWall","slug":"sonicwall"}},{"hub":true,"name":"SonicWall SMA 1000 Series Firmware","slug":"sma-1000-series-firmware","vendor":{"name":"SonicWall","slug":"sonicwall"}},{"hub":true,"name":"SonicWall SMA1000 Appliances","slug":"sma1000-appliances","vendor":{"name":"SonicWall","slug":"sonicwall"}}],"exploited_since":"2026-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface"},{"cve":"CVE-2026-56164","cvss":5.3,"slug":"cve-2026-56164-microsoft-sharepoint-missing-authentication-in-critical-function","title":"Microsoft SharePoint missing authentication in critical function","severity":"critical","exploited":true,"published_at":"2026-07-14T17:17:09.907+00:00","technologies":[{"hub":true,"name":"Microsoft SharePoint Enterprise Server 2016","slug":"sharepoint-enterprise-server-2016","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Sharepoint-Server","slug":"sharepoint-server","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft SharePoint Server 2019","slug":"sharepoint-server-2019","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft SharePoint Server Subscription Edition","slug":"sharepoint-server-subscription-edition","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-56164-microsoft-sharepoint-missing-authentication-in-critical-function"},{"cve":"CVE-2026-56155","cvss":7.8,"slug":"cve-2026-56155-microsoft-ad-fs-privilege-escalation-via-insufficient-access","title":"Microsoft AD FS privilege escalation via insufficient access control granularity","severity":"critical","exploited":true,"published_at":"2026-07-14T17:17:09.763+00:00","technologies":[{"hub":true,"name":"Microsoft Active Directory Federation Services","slug":"active-directory-federation-services","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10","slug":"windows-10","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows Server 2012 R2","slug":"windows-server-2012-r2","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-56155-microsoft-ad-fs-privilege-escalation-via-insufficient-access"},{"cve":"CVE-2008-4128","cvss":9.3,"epss":0.1204,"slug":"cve-2008-4128-cisco-ios-csrf-in-http-administration-component","title":"Cisco IOS CSRF in HTTP Administration component","severity":"critical","exploited":true,"published_at":"2026-07-13T00:00:00+00:00","technologies":[{"hub":false,"name":"Cisco 871 Integrated Services Router","slug":"871-integrated-services-router","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco IOS","slug":"ios","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-07-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-4128-cisco-ios-csrf-in-http-administration-component"}],"previous":{"key":"2026-07-06","top":"Adobe ColdFusion","total":6,"period":{"end":"2026-07-12","start":"2026-07-06"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-07-06"},"next":{"key":"2026-07-20","top":"Wordpress","total":6,"period":{"end":"2026-07-26","start":"2026-07-20"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-07-20"}}