# Newly exploited vulnerabilities: week of 13 to 19 July 2026 (week 29)

Source: https://junglewise.ai/threats/exploited/2026-07-13  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 19:24 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-07-13.json  
License: CC BY 4.0 with a link back

In the week of 13 to 19 July 2026, 10 vulnerabilities were newly recorded as exploited in the wild, 10 of them critical. The technology hit most was Fortinet FortiSandbox (2), followed by Fortinet FortiSandbox PaaS (2) and Microsoft SharePoint Enterprise Server 2016 (2).

## Newly exploited this week

- [CVE-2026-58644: Microsoft SharePoint remote code execution via untrusted deserialization](https://junglewise.ai/threats/cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted) (critical, exploited in the wild, CVSS 9.8, exploited since 16 Jul 2026, published 14 Jul 2026)
- [CVE-2026-25089: Fortinet FortiSandbox OS command injection in Web UI](https://junglewise.ai/threats/cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui) (critical, exploited in the wild, CVSS 9.8, exploited since 16 Jul 2026, published 9 Jun 2026)
- [CVE-2026-39808: Fortinet FortiSandbox OS command injection in API endpoint](https://junglewise.ai/threats/cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint) (critical, exploited in the wild, CVSS 9.8, exploited since 16 Jul 2026, published 14 Apr 2026)
- [CVE-2023-4346: KNX Association KNX Protocol account lockout in Connection Authorization Option 1](https://junglewise.ai/threats/cve-2023-4346-knx-association-knx-protocol-account-lockout-in-connection) (critical, exploited in the wild, CVSS 7.5, exploited since 15 Jul 2026, published 15 Jul 2026)
- [CVE-2026-46817: Oracle E-Business Suite remote compromise in Oracle Payments](https://junglewise.ai/threats/cve-2026-46817-oracle-e-business-suite-remote-compromise-in-oracle-payments) (critical, exploited in the wild, CVSS 9.8, exploited since 15 Jul 2026, published 28 May 2026)
- [CVE-2026-15410: SonicWall SMA1000 code injection in Appliance Management Console](https://junglewise.ai/threats/cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console) (critical, exploited in the wild, exploited since 14 Jul 2026, published 14 Jul 2026)
- [CVE-2026-15409: SonicWall SMA1000 SSRF in Work Place interface](https://junglewise.ai/threats/cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface) (critical, exploited in the wild, exploited since 14 Jul 2026, published 14 Jul 2026)
- [CVE-2026-56164: Microsoft SharePoint missing authentication in critical function](https://junglewise.ai/threats/cve-2026-56164-microsoft-sharepoint-missing-authentication-in-critical-function) (critical, exploited in the wild, CVSS 5.3, exploited since 14 Jul 2026, published 14 Jul 2026)
- [CVE-2026-56155: Microsoft AD FS privilege escalation via insufficient access control granularity](https://junglewise.ai/threats/cve-2026-56155-microsoft-ad-fs-privilege-escalation-via-insufficient-access) (critical, exploited in the wild, CVSS 7.8, exploited since 14 Jul 2026, published 14 Jul 2026)
- [CVE-2008-4128: Cisco IOS CSRF in HTTP Administration component](https://junglewise.ai/threats/cve-2008-4128-cisco-ios-csrf-in-http-administration-component) (critical, exploited in the wild, CVSS 9.3, exploited since 13 Jul 2026, published 13 Jul 2026)

## Technologies hit most

1. [Fortinet FortiSandbox](https://junglewise.ai/threats/technologies/fortisandbox): 2 vulnerabilities
2. [Fortinet FortiSandbox PaaS](https://junglewise.ai/threats/technologies/fortisandbox-paas): 2 vulnerabilities
3. [Microsoft SharePoint Enterprise Server 2016](https://junglewise.ai/threats/technologies/sharepoint-enterprise-server-2016): 2 vulnerabilities
4. [Microsoft SharePoint Server 2019](https://junglewise.ai/threats/technologies/sharepoint-server-2019): 2 vulnerabilities
5. [Microsoft SharePoint Server Subscription Edition](https://junglewise.ai/threats/technologies/sharepoint-server-subscription-edition): 2 vulnerabilities
6. SonicWall SMA 1000 Series: 2 vulnerabilities
7. [SonicWall SMA1000 Appliances](https://junglewise.ai/threats/technologies/sma1000-appliances): 2 vulnerabilities
8. Cisco 871 Integrated Services Router: 1 vulnerability
9. [Cisco IOS](https://junglewise.ai/threats/technologies/ios): 1 vulnerability
10. [Fortinet FortiSandbox Cloud](https://junglewise.ai/threats/technologies/fortisandbox-cloud): 1 vulnerability
11. Knx Association KNX Protocol: 1 vulnerability
12. Knx Association Knx Protocol Connection Authorization Option 1: 1 vulnerability
13. [Microsoft Active Directory Federation Services](https://junglewise.ai/threats/technologies/active-directory-federation-services): 1 vulnerability
14. [Microsoft SharePoint](https://junglewise.ai/threats/technologies/sharepoint): 1 vulnerability
15. [Microsoft Sharepoint-Server](https://junglewise.ai/threats/technologies/sharepoint-server): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 13 to 19 July 2026 (week 29)", https://junglewise.ai/threats/exploited/2026-07-13, 2 October 2026.