https://exploit-radar.com/en/flux/categories/securite.xml Exploit Radar: Security products The latest additions to CISA’s catalog of exploited vulnerabilities in the “Security products” category (indicative classification). 2026-07-16T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-25089/ CVE-2026-25089 — Fortinet FortiSandbox 2026-07-16T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 16, 2026. https://exploit-radar.com/en/cve/CVE-2026-39808/ CVE-2026-39808 — Fortinet FortiSandbox 2026-07-16T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 16, 2026. https://exploit-radar.com/en/cve/CVE-2026-20253/ CVE-2026-20253 — Splunk Enterprise 2026-06-18T00:00:00Z Apply the patches or mitigations from Splunk; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on June 18, 2026. https://exploit-radar.com/en/cve/CVE-2026-34926/ CVE-2026-34926 — Trend Micro Apex One (ex-OfficeScan) 2026-05-21T00:00:00Z Apply the patches or mitigations from Trend Micro; if none are available, stop using the product. For cloud services, follow the guidance from Trend Micro. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 21, 2026. https://exploit-radar.com/en/cve/CVE-2026-41091/ CVE-2026-41091 — Microsoft Defender 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-45498/ CVE-2026-45498 — Microsoft Defender 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-33825/ CVE-2026-33825 — Microsoft Defender 2026-04-22T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 22, 2026. https://exploit-radar.com/en/cve/CVE-2024-7694/ CVE-2024-7694 — TeamT5 ThreatSonar Anti-Ransomware 2026-02-17T00:00:00Z Apply the patches or mitigations from TeamT5; if none are available, stop using the product. For cloud services, follow the guidance from TeamT5. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 17, 2026. https://exploit-radar.com/en/cve/CVE-2025-54948/ CVE-2025-54948 — Trend Micro Apex One (ex-OfficeScan) 2025-08-18T00:00:00Z Apply the patches or mitigations from Trend Micro; if none are available, stop using the product. For cloud services, follow the guidance from Trend Micro. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 18, 2025. https://exploit-radar.com/en/cve/CVE-2025-24016/ CVE-2025-24016 — Wazuh Server 2025-06-10T00:00:00Z Apply the patches or mitigations from Wazuh; if none are available, stop using the product. For cloud services, follow the guidance from Wazuh. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 10, 2025. https://exploit-radar.com/en/cve/CVE-2023-1671/ CVE-2023-1671 — Sophos Web Appliance 2023-11-16T00:00:00Z Apply the patches or mitigations from Sophos; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 16, 2023. https://exploit-radar.com/en/cve/CVE-2023-41179/ CVE-2023-41179 — Trend Micro Apex One (ex-OfficeScan) 2023-09-21T00:00:00Z Apply the patches or mitigations from Trend Micro; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 21, 2023. https://exploit-radar.com/en/cve/CVE-2022-42948/ CVE-2022-42948 — Fortra Cobalt Strike 2023-03-30T00:00:00Z Apply the security update from Fortra. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 30, 2023. https://exploit-radar.com/en/cve/CVE-2022-39197/ CVE-2022-39197 — Fortra Cobalt Strike 2023-03-30T00:00:00Z Apply the security update from Fortra. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 30, 2023. https://exploit-radar.com/en/cve/CVE-2022-44698/ CVE-2022-44698 — Microsoft Defender 2022-12-13T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on December 13, 2022. https://exploit-radar.com/en/cve/CVE-2022-40139/ CVE-2022-40139 — Trend Micro Apex One (ex-OfficeScan) 2022-09-15T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 15, 2022. https://exploit-radar.com/en/cve/CVE-2022-26871/ CVE-2022-26871 — Trend Micro Apex Central 2022-03-31T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 31, 2022. https://exploit-radar.com/en/cve/CVE-2017-8540/ CVE-2017-8540 — Microsoft Defender 2022-03-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2020-4427/ CVE-2020-4427 — IBM Data Risk Manager 2021-11-03T00:00:00Z Apply the security update from IBM. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8599/ CVE-2020-8599 — Trend Micro Apex One (ex-OfficeScan) 2021-11-03T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-4428/ CVE-2020-4428 — IBM Data Risk Manager 2021-11-03T00:00:00Z Apply the security update from IBM. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8467/ CVE-2020-8467 — Trend Micro Apex One (ex-OfficeScan) 2021-11-03T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8468/ CVE-2020-8468 — Trend Micro Apex One (ex-OfficeScan) 2021-11-03T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-36741/ CVE-2021-36741 — Trend Micro Apex One (ex-OfficeScan) 2021-11-03T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-24557/ CVE-2020-24557 — Trend Micro Apex One (ex-OfficeScan) 2021-11-03T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-1647/ CVE-2021-1647 — Microsoft Defender 2021-11-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-23874/ CVE-2021-23874 — McAfee Total Protection (MTP) 2021-11-03T00:00:00Z Apply the security update from McAfee. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-36742/ CVE-2021-36742 — Trend Micro Apex One (ex-OfficeScan) 2021-11-03T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-18187/ CVE-2019-18187 — Trend Micro Apex One (ex-OfficeScan) 2021-11-03T00:00:00Z Apply the security update from Trend Micro. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-4430/ CVE-2020-4430 — IBM Data Risk Manager 2021-11-03T00:00:00Z Apply the security update from IBM. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.