Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CISA KEV deadline
CVE-2026-58644
Assessment context
CISA deadline passed 99 days ago
Weekly briefing
Week 29 · 13 Jul – 19 Jul 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
30 source records · 18 groupsSecurityCloudflare
WAF - WAF Release - 2026-07-17 - Emergency
Security advisory · Cloudflare WAF changelog
Assessment context
SecurityMicrosoft Edge
Edge 150.0.4078.83: Chromium security fixes
Security advisory · Microsoft Edge security release notes
SecuritySharePoint
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
CISA KEV deadline
CVE-2026-56164
Assessment context
CISA deadline passed 101 days ago
SecurityFortinet2 source records
Fortinet · exploited, added to CISA KEV · 2 entries
- Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2026-25089
Assessment context
CISA lists it as exploited
- Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2026-39808
Assessment context
CISA lists it as exploited
SecuritySharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Added to CISA KEV
CVE-2026-58644
Assessment context
CISA lists it as exploited
SecurityMicrosoft Edge
Edge 150.0.4078.80: Chromium security fixes
Security advisory · Microsoft Edge security release notes
SecurityOracle E-Business Suite
Oracle E-Business Suite Improper Privilege Management Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2026-46817
Assessment context
CISA lists it as exploited
SecurityDefender2 source records
Security news · 2 entries
- Introducing scheduled antivirus scans on Microsoft Defender Linux
Security news · Microsoft Defender for Endpoint Blog
- New Privileged Token Context Telemetry Boosts Advanced Hunting in Microsoft Defender
Security news · Microsoft Defender for Endpoint Blog
SecuritySentinel
Announcing the ASIM Parser Creation Agentic Experience
Security news · Microsoft Sentinel Blog
SecurityActive Directory
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Added to CISA KEV
CVE-2026-56155
Assessment context
CISA lists it as exploited
SecurityCloudflare
WAF - WAF Release - 2026-07-14
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2026-8451, CVE-2026-8037
CVE-2026-8451CVE-2026-8037
SecurityFortinet11 source records
Security advisory · 11 entries
- FortiAuthenticator: Out of bounds read in GUI
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it high
- FortiSIEM: Supers override fails to properly override supervisor address
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it high
- FortiSandbox: Unauthenticated VNC access exposed on all interfaces
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it high
Show the other 8 entries
- Missed certificate verification in AD Connector communication with FortiClient EMS
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it high
- FortiOS: Buffer overread in authd and wad daemon
Security advisory · Fortinet PSIRT advisories
- FortiOS: Header injection in Web Filter warning page
Security advisory · Fortinet PSIRT advisories
- FortiOS: Header injection in captive portal authentication form
Security advisory · Fortinet PSIRT advisories
- FortiOS: Path traversal in CLI command allows deletion of root file system
Security advisory · Fortinet PSIRT advisories
- FortiOS: SSL-VPN Reflected XSS
Security advisory · Fortinet PSIRT advisories
- FortiOS: Stack Buffer Overflow in Log Report
Security advisory · Fortinet PSIRT advisories
- FortiSIEM: Cross-Site Scripting in Domain parameter
Security advisory · Fortinet PSIRT advisories
SecurityMicrosoft Security Update Guide
July 2026 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
SecuritySharePoint
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
Added to CISA KEV
CVE-2026-56164
Assessment context
CISA lists it as exploited
SecurityDefender
Microsoft Defender now integrates with Dragos, Forescout, & Armis for OT Security
Security news · Microsoft Defender XDR Blog
SecurityCisco
Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2008-4128
Assessment context
CISA lists it as exploited
SecuritySentinel
Building toward an Agentic SOC: A Portable, Autonomous Malware Investigation Agent
Security news · Microsoft Sentinel Blog
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.