Exploit / PoCcriticalExploited in the wild

U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsJul 15, 2026 · 10:52 UTC (Jul 15, 2026)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-15409 CVE-2026-15410 CVE-2026-56155 CVE-2026-56164

Tags: cve-2026-15409 cve-2026-15410 cve-2026-56155 cve-2026-56164 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-15409 +1 related CVE CVE-2026-15410	Unauthenticated SSRF in SonicWall SMA1000 Appliances	10.0 group max	7%	KEVRansomwarePoC	Jul 14, 2026 KEV Jul 14, 2026
CVE-2026-56155	Local Privilege Escalation in Microsoft Active Directory Federation Services	7.8	<1%	KEV	Jul 14, 2026 KEV Jul 14, 2026
CVE-2026-56164	Missing Authentication in Microsoft SharePoint Server Allows Privilege Escalation	9.8	1%	KEV	Jul 14, 2026 KEV Jul 14, 2026

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.