https://exploit-radar.com/en/flux/categories/collaboration.xml Exploit Radar: Collaboration, telephony and video conferencing The latest additions to CISA’s catalog of exploited vulnerabilities in the “Collaboration, telephony and video conferencing” category (indicative classification). 2026-09-25T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-65660/ CVE-2026-65660 — Microsoft SharePoint Server 2026-09-25T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 25, 2026. https://exploit-radar.com/en/cve/CVE-2026-9586/ CVE-2026-9586 — Sangoma Switchvox 2026-09-02T00:00:00Z Apply the patches or mitigations from Sangoma; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 2, 2026. https://exploit-radar.com/en/cve/CVE-2026-72529/ CVE-2026-72529 — TrueConf Server 2026-08-20T00:00:00Z Apply the patches or mitigations from TrueConf; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-72530/ CVE-2026-72530 — TrueConf Server 2026-08-20T00:00:00Z Apply the patches or mitigations from TrueConf; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-55040/ CVE-2026-55040 — Microsoft SharePoint Server 2026-08-18T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 18, 2026. https://exploit-radar.com/en/cve/CVE-2026-50522/ CVE-2026-50522 — Microsoft SharePoint Server 2026-07-22T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 22, 2026. https://exploit-radar.com/en/cve/CVE-2026-58644/ CVE-2026-58644 — Microsoft SharePoint Server 2026-07-16T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 16, 2026. https://exploit-radar.com/en/cve/CVE-2026-56164/ CVE-2026-56164 — Microsoft SharePoint Server 2026-07-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-45659/ CVE-2026-45659 — Microsoft SharePoint Server 2026-07-01T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 1, 2026. https://exploit-radar.com/en/cve/CVE-2026-20230/ CVE-2026-20230 — Cisco Unified Communications Manager 2026-06-25T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on June 25, 2026. https://exploit-radar.com/en/cve/CVE-2026-32201/ CVE-2026-32201 — Microsoft SharePoint Server 2026-04-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-3502/ CVE-2026-3502 — TrueConf Client 2026-04-02T00:00:00Z Apply the patches or mitigations from TrueConf; if none are available, stop using the product. For cloud services, follow the guidance from TrueConf. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 2, 2026. https://exploit-radar.com/en/cve/CVE-2026-20963/ CVE-2026-20963 — Microsoft SharePoint Server 2026-03-18T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on March 18, 2026. https://exploit-radar.com/en/cve/CVE-2019-19006/ CVE-2019-19006 — Sangoma FreePBX 2026-02-03T00:00:00Z Apply the patches or mitigations from Sangoma; if none are available, stop using the product. For cloud services, follow the guidance from Sangoma. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 3, 2026. https://exploit-radar.com/en/cve/CVE-2025-64328/ CVE-2025-64328 — Sangoma FreePBX 2026-02-03T00:00:00Z Apply the patches or mitigations from Sangoma; if none are available, stop using the product. For cloud services, follow the guidance from Sangoma. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 3, 2026. https://exploit-radar.com/en/cve/CVE-2026-20045/ CVE-2026-20045 — Cisco Unified Communications Manager 2026-01-21T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 21, 2026. https://exploit-radar.com/en/cve/CVE-2025-24893/ CVE-2025-24893 — XWiki Platform 2025-10-30T00:00:00Z Apply the patches or mitigations from XWiki; if none are available, stop using the product. For cloud services, follow the guidance from XWiki. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 30, 2025. https://exploit-radar.com/en/cve/CVE-2025-57819/ CVE-2025-57819 — Sangoma FreePBX 2025-08-29T00:00:00Z Apply the patches or mitigations from Sangoma; if none are available, stop using the product. For cloud services, follow the guidance from Sangoma. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 29, 2025. https://exploit-radar.com/en/cve/CVE-2025-49704/ CVE-2025-49704 — Microsoft SharePoint Server 2025-07-22T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 1 day. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 22, 2025. https://exploit-radar.com/en/cve/CVE-2025-49706/ CVE-2025-49706 — Microsoft SharePoint Server 2025-07-22T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 1 day. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 22, 2025. https://exploit-radar.com/en/cve/CVE-2025-53770/ CVE-2025-53770 — Microsoft SharePoint Server 2025-07-20T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 1 day. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 20, 2025. https://exploit-radar.com/en/cve/CVE-2025-27920/ CVE-2025-27920 — Srimax Output Messenger 2025-05-19T00:00:00Z Apply the patches or mitigations from Srimax; if none are available, stop using the product. For cloud services, follow the guidance from Srimax. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025. https://exploit-radar.com/en/cve/CVE-2025-32756/ CVE-2025-32756 — Fortinet FortiVoice / FortiFone 2025-05-14T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 14, 2025. https://exploit-radar.com/en/cve/CVE-2024-41710/ CVE-2024-41710 — Mitel SIP Phones (6800 / 6900) 2025-02-12T00:00:00Z Apply the patches or mitigations from Mitel; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 12, 2025. https://exploit-radar.com/en/cve/CVE-2024-41713/ CVE-2024-41713 — Mitel MiCollab 2025-01-07T00:00:00Z Apply the patches or mitigations from Mitel; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 7, 2025. https://exploit-radar.com/en/cve/CVE-2024-55550/ CVE-2024-55550 — Mitel MiCollab 2025-01-07T00:00:00Z Apply the patches or mitigations from Mitel; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 7, 2025. https://exploit-radar.com/en/cve/CVE-2021-26086/ CVE-2021-26086 — Atlassian Jira Server / Data Center 2024-11-12T00:00:00Z Apply the patches or mitigations from Atlassian; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 12, 2024. https://exploit-radar.com/en/cve/CVE-2024-38094/ CVE-2024-38094 — Microsoft SharePoint Server 2024-10-22T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 22, 2024. https://exploit-radar.com/en/cve/CVE-2023-24955/ CVE-2023-24955 — Microsoft SharePoint Server 2024-03-26T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 26, 2024. https://exploit-radar.com/en/cve/CVE-2023-22527/ CVE-2023-22527 — Atlassian Confluence Server / Data Center 2024-01-24T00:00:00Z Apply the patches or mitigations from Atlassian; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 24, 2024. https://exploit-radar.com/en/cve/CVE-2023-29357/ CVE-2023-29357 — Microsoft SharePoint Server 2024-01-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2024. https://exploit-radar.com/en/cve/CVE-2023-22518/ CVE-2023-22518 — Atlassian Confluence Server / Data Center 2023-11-07T00:00:00Z Apply the patches or mitigations from Atlassian; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 7, 2023. https://exploit-radar.com/en/cve/CVE-2023-41763/ CVE-2023-41763 — Microsoft Skype for Business / Lync 2023-10-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 10, 2023. https://exploit-radar.com/en/cve/CVE-2023-22515/ CVE-2023-22515 — Atlassian Confluence Server / Data Center 2023-10-05T00:00:00Z Apply the patches or mitigations from Atlassian; if none are available, stop using the product. CISA deadline: 8 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 5, 2023. https://exploit-radar.com/en/cve/CVE-2023-32315/ CVE-2023-32315 — Ignite Realtime Openfire 2023-08-24T00:00:00Z Apply the patches or mitigations from Ignite Realtime; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 24, 2023. https://exploit-radar.com/en/cve/CVE-2022-40765/ CVE-2022-40765 — Mitel MiVoice Connect 2023-02-21T00:00:00Z Apply the security update from Mitel. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 21, 2023. https://exploit-radar.com/en/cve/CVE-2022-41223/ CVE-2022-41223 — Mitel MiVoice Connect 2023-02-21T00:00:00Z Apply the security update from Mitel. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 21, 2023. https://exploit-radar.com/en/cve/CVE-2022-26138/ CVE-2022-26138 — Atlassian Confluence Server / Data Center 2022-07-29T00:00:00Z Apply the security update from Atlassian. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 29, 2022. https://exploit-radar.com/en/cve/CVE-2022-29499/ CVE-2022-29499 — Mitel MiVoice Connect 2022-06-27T00:00:00Z Apply the security update from Mitel. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 27, 2022. https://exploit-radar.com/en/cve/CVE-2022-26134/ CVE-2022-26134 — Atlassian Confluence Server / Data Center 2022-06-02T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 4 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 2, 2022. https://exploit-radar.com/en/cve/CVE-2007-3010/ CVE-2007-3010 — Alcatel-Lucent Enterprise OmniPCX Enterprise 2022-04-15T00:00:00Z Apply the security update from Alcatel-Lucent Enterprise. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 15, 2022. https://exploit-radar.com/en/cve/CVE-2021-26085/ CVE-2021-26085 — Atlassian Confluence Server / Data Center 2022-03-28T00:00:00Z Apply the security update from Atlassian. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2022-26143/ CVE-2022-26143 — Mitel MiCollab 2022-03-25T00:00:00Z Apply the security update from Mitel. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2019-11581/ CVE-2019-11581 — Atlassian Jira Server / Data Center 2022-03-07T00:00:00Z Apply the security update from Atlassian. CISA deadline: 184 days. Added to CISA’s catalog of exploited vulnerabilities on March 7, 2022. https://exploit-radar.com/en/cve/CVE-2020-5722/ CVE-2020-5722 — Grandstream UCM6200 2022-01-28T00:00:00Z Apply the security update from Grandstream. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on January 28, 2022. https://exploit-radar.com/en/cve/CVE-2019-0604/ CVE-2019-0604 — Microsoft SharePoint Server 2021-11-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-3396/ CVE-2019-3396 — Atlassian Confluence Server / Data Center 2021-11-03T00:00:00Z Apply the security update from Atlassian. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-3161/ CVE-2020-3161 — Cisco IP Phones 2021-11-03T00:00:00Z Apply the security update from Cisco. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8644/ CVE-2020-8644 — PlaySMS 2021-11-03T00:00:00Z Apply the security update from PlaySMS. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-26084/ CVE-2021-26084 — Atlassian Confluence Server / Data Center 2021-11-03T00:00:00Z Apply the security update from Atlassian. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.