BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Hazard//Exploited vulnerability fix deadlines//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:Hazard — vulnerability fix deadlines X-WR-CALDESC:CISA remediation deadlines for vulnerabilities confirmed exp loited in the wild. REFRESH-INTERVAL;VALUE=DURATION:P1D X-PUBLISHED-TTL:P1D BEGIN:VEVENT UID:cve-2026-48908@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260710 DTEND;VALUE=DATE:20260711 SUMMARY:Fix deadline: CVE-2026-48908 — JoomShaper SP Page Builder DESCRIPTION:Weaponised and widely attempted. JoomShaper SP Page Builder U nrestricted Upload of File with Dangerous Type Vulnerability\n\nCISA req uires federal agencies to remediate by 2026-07-10; treat it as a priorit y signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve- 2026-48908/ URL:https://black-hat.co.uk/exploited/cve-2026-48908/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-55255@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260710 DTEND;VALUE=DATE:20260711 SUMMARY:Fix deadline: CVE-2026-55255 — Langflow Langflow DESCRIPTION:Confirmed exploited in the wild. Langflow Authorization Bypas s Through User-Controlled Key Vulnerability\n\nCISA requires federal age ncies to remediate by 2026-07-10; treat it as a priority signal regardle ss of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-55255/ URL:https://black-hat.co.uk/exploited/cve-2026-55255/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-56290@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260710 DTEND;VALUE=DATE:20260711 SUMMARY:Fix deadline: CVE-2026-56290 — Joomlack Page Builder DESCRIPTION:Weaponised and widely attempted. Joomlack Page Builder Improp er Access Control Vulnerability\n\nCISA requires federal agencies to rem ediate by 2026-07-10; treat it as a priority signal regardless of sector .\n\nhttps://black-hat.co.uk/exploited/cve-2026-56290/ URL:https://black-hat.co.uk/exploited/cve-2026-56290/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-48282@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260710 DTEND;VALUE=DATE:20260711 SUMMARY:Fix deadline: CVE-2026-48282 — Adobe ColdFusion DESCRIPTION:Weaponised and widely attempted. Adobe ColdFusion Path Traver sal Vulnerability\n\nCISA requires federal agencies to remediate by 2026 -07-10; treat it as a priority signal regardless of sector.\n\nhttps://b lack-hat.co.uk/exploited/cve-2026-48282/ URL:https://black-hat.co.uk/exploited/cve-2026-48282/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-56291@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260713 DTEND;VALUE=DATE:20260714 SUMMARY:Fix deadline: CVE-2026-56291 — Balbooa Forms DESCRIPTION:Weaponised and widely attempted. Balbooa Forms Unrestricted U pload of File with Dangerous Type Vulnerability\n\nCISA requires federal agencies to remediate by 2026-07-13; treat it as a priority signal rega rdless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-56291/ URL:https://black-hat.co.uk/exploited/cve-2026-56291/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-48939@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260713 DTEND;VALUE=DATE:20260714 SUMMARY:Fix deadline: CVE-2026-48939 — iCagenda iCagenda DESCRIPTION:Confirmed exploited in the wild. iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability\n\nCISA requires federal agen cies to remediate by 2026-07-13; treat it as a priority signal regardles s of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-48939/ URL:https://black-hat.co.uk/exploited/cve-2026-48939/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2008-4128@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260716 DTEND;VALUE=DATE:20260717 SUMMARY:Fix deadline: CVE-2008-4128 — Cisco IOS DESCRIPTION:Confirmed exploited in the wild. Cisco IOS Cross-Site Request Forgery Vulnerability\n\nCISA requires federal agencies to remediate by 2026-07-16; treat it as a priority signal regardless of sector.\n\nhttp s://black-hat.co.uk/exploited/cve-2008-4128/ URL:https://black-hat.co.uk/exploited/cve-2008-4128/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-56164@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260717 DTEND;VALUE=DATE:20260718 SUMMARY:Fix deadline: CVE-2026-56164 — Microsoft SharePoint Server DESCRIPTION:Confirmed exploited in the wild. Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability\n\nCISA requi res federal agencies to remediate by 2026-07-17; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-20 26-56164/ URL:https://black-hat.co.uk/exploited/cve-2026-56164/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-15409@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260717 DTEND;VALUE=DATE:20260718 SUMMARY:Fix deadline: CVE-2026-15409 (ransomware) — SonicWall SMA1000 A ppliances DESCRIPTION:Ransomware crews are using this. SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability\n\nCISA requires federal agen cies to remediate by 2026-07-17; treat it as a priority signal regardles s of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-15409/ URL:https://black-hat.co.uk/exploited/cve-2026-15409/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-15410@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260717 DTEND;VALUE=DATE:20260718 SUMMARY:Fix deadline: CVE-2026-15410 (ransomware) — SonicWall SMA1000 A ppliances DESCRIPTION:Ransomware crews are using this. SonicWall SMA1000 Appliances Code Injection Vulnerability\n\nCISA requires federal agencies to remed iate by 2026-07-17; treat it as a priority signal regardless of sector.\ n\nhttps://black-hat.co.uk/exploited/cve-2026-15410/ URL:https://black-hat.co.uk/exploited/cve-2026-15410/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-46817@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260718 DTEND;VALUE=DATE:20260719 SUMMARY:Fix deadline: CVE-2026-46817 — Oracle E-Business Suite DESCRIPTION:Confirmed exploited in the wild. Oracle E-Business Suite Impr oper Privilege Management Vulnerability\n\nCISA requires federal agencie s to remediate by 2026-07-18; treat it as a priority signal regardless o f sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-46817/ URL:https://black-hat.co.uk/exploited/cve-2026-46817/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-58644@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260719 DTEND;VALUE=DATE:20260720 SUMMARY:Fix deadline: CVE-2026-58644 — Microsoft SharePoint DESCRIPTION:Confirmed exploited in the wild. Microsoft SharePoint Deseria lization of Untrusted Data Vulnerability\n\nCISA requires federal agenci es to remediate by 2026-07-19; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-58644/ URL:https://black-hat.co.uk/exploited/cve-2026-58644/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-25089@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260719 DTEND;VALUE=DATE:20260720 SUMMARY:Fix deadline: CVE-2026-25089 — Fortinet FortiSandbox DESCRIPTION:Weaponised and widely attempted. Fortinet FortiSandbox OS Com mand Injection Vulnerability\n\nCISA requires federal agencies to remedi ate by 2026-07-19; treat it as a priority signal regardless of sector.\n \nhttps://black-hat.co.uk/exploited/cve-2026-25089/ URL:https://black-hat.co.uk/exploited/cve-2026-25089/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-39808@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260719 DTEND;VALUE=DATE:20260720 SUMMARY:Fix deadline: CVE-2026-39808 — Fortinet FortiSandbox DESCRIPTION:Weaponised and widely attempted. Fortinet FortiSandbox OS Com mand Injection Vulnerability\n\nCISA requires federal agencies to remedi ate by 2026-07-19; treat it as a priority signal regardless of sector.\n \nhttps://black-hat.co.uk/exploited/cve-2026-39808/ URL:https://black-hat.co.uk/exploited/cve-2026-39808/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-63030@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260724 DTEND;VALUE=DATE:20260725 SUMMARY:Fix deadline: CVE-2026-63030 — WordPress Core DESCRIPTION:Weaponised and widely attempted. WordPress Core Interpretatio n Conflict Vulnerability\n\nCISA requires federal agencies to remediate by 2026-07-24; treat it as a priority signal regardless of sector.\n\nht tps://black-hat.co.uk/exploited/cve-2026-63030/ URL:https://black-hat.co.uk/exploited/cve-2026-63030/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-0770@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260724 DTEND;VALUE=DATE:20260725 SUMMARY:Fix deadline: CVE-2026-0770 — Langflow Langflow DESCRIPTION:Weaponised and widely attempted. Langflow Inclusion of Functi onality from Untrusted Control Sphere Vulnerability\n\nCISA requires fed eral agencies to remediate by 2026-07-24; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-0770 / URL:https://black-hat.co.uk/exploited/cve-2026-0770/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2021-27137@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260724 DTEND;VALUE=DATE:20260725 SUMMARY:Fix deadline: CVE-2021-27137 — DD-WRT DD-WRT DESCRIPTION:Confirmed exploited in the wild. DD-WRT Stack-Based Buffer Ov erflow Vulnerability\n\nCISA requires federal agencies to remediate by 2 026-07-24; treat it as a priority signal regardless of sector.\n\nhttps: //black-hat.co.uk/exploited/cve-2021-27137/ URL:https://black-hat.co.uk/exploited/cve-2021-27137/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-16232@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260725 DTEND;VALUE=DATE:20260726 SUMMARY:Fix deadline: CVE-2026-16232 — Check Point SmartConsole DESCRIPTION:Weaponised and widely attempted. Check Point SmartConsole Imp roper Authentication Vulnerability\n\nCISA requires federal agencies to remediate by 2026-07-25; treat it as a priority signal regardless of sec tor.\n\nhttps://black-hat.co.uk/exploited/cve-2026-16232/ URL:https://black-hat.co.uk/exploited/cve-2026-16232/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-50522@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260725 DTEND;VALUE=DATE:20260726 SUMMARY:Fix deadline: CVE-2026-50522 — Microsoft SharePoint DESCRIPTION:Weaponised and widely attempted. Microsoft SharePoint Deseria lization of Untrusted Data Vulnerability \n\nCISA requires federal agenc ies to remediate by 2026-07-25; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-50522/ URL:https://black-hat.co.uk/exploited/cve-2026-50522/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-56155@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260728 DTEND;VALUE=DATE:20260729 SUMMARY:Fix deadline: CVE-2026-56155 — Microsoft Active Directory Feder ation Services DESCRIPTION:Confirmed exploited in the wild. Microsoft Active Directory F ederation Services Insufficient Granularity of Access Control Vulnerabil ity \n\nCISA requires federal agencies to remediate by 2026-07-28; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.u k/exploited/cve-2026-56155/ URL:https://black-hat.co.uk/exploited/cve-2026-56155/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2023-4346@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260729 DTEND;VALUE=DATE:20260730 SUMMARY:Fix deadline: CVE-2023-4346 — KNX Association KNX Protocol Conn ection Authorization Option 1 DESCRIPTION:Confirmed exploited in the wild. KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Me chanism Vulnerability\n\nCISA requires federal agencies to remediate by 2026-07-29; treat it as a priority signal regardless of sector.\n\nhttps ://black-hat.co.uk/exploited/cve-2023-4346/ URL:https://black-hat.co.uk/exploited/cve-2023-4346/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-16812@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260730 DTEND;VALUE=DATE:20260731 SUMMARY:Fix deadline: CVE-2026-16812 — Arista VeloCloud Orchestrator DESCRIPTION:Confirmed exploited in the wild. Arista VeloCloud Orchestrato r On-Prem OS Command Injection Vulnerability\n\nCISA requires federal ag encies to remediate by 2026-07-30; treat it as a priority signal regardl ess of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-16812/ URL:https://black-hat.co.uk/exploited/cve-2026-16812/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-20316@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260801 DTEND;VALUE=DATE:20260802 SUMMARY:Fix deadline: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) DESCRIPTION:Confirmed exploited in the wild. Cisco Secure Firewall Manage ment Center Use of Hard-coded Password Vulnerability\n\nCISA requires fe deral agencies to remediate by 2026-08-01; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-203 16/ URL:https://black-hat.co.uk/exploited/cve-2026-20316/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-60137@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260804 DTEND;VALUE=DATE:20260805 SUMMARY:Fix deadline: CVE-2026-60137 — WordPress Core DESCRIPTION:Weaponised and widely attempted. WordPress Core SQL Injection Vulnerability\n\nCISA requires federal agencies to remediate by 2026-08 -04; treat it as a priority signal regardless of sector.\n\nhttps://blac k-hat.co.uk/exploited/cve-2026-60137/ URL:https://black-hat.co.uk/exploited/cve-2026-60137/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-18577@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260806 DTEND;VALUE=DATE:20260807 SUMMARY:Fix deadline: CVE-2026-18577 — N-able N-central DESCRIPTION:Confirmed exploited in the wild. N-able N-central Authenticat ion Bypass Using an Alternate Path or Channel Vulnerability\n\nCISA requ ires federal agencies to remediate by 2026-08-06; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2 026-18577/ URL:https://black-hat.co.uk/exploited/cve-2026-18577/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-18556@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260807 DTEND;VALUE=DATE:20260808 SUMMARY:Fix deadline: CVE-2026-18556 — N-able N-central DESCRIPTION:Confirmed exploited in the wild. N-able N-central Authenticat ion Bypass Using an Alternate Path or Channel Vulnerability\n\nCISA requ ires federal agencies to remediate by 2026-08-07; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2 026-18556/ URL:https://black-hat.co.uk/exploited/cve-2026-18556/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-34486@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260807 DTEND;VALUE=DATE:20260808 SUMMARY:Fix deadline: CVE-2026-34486 — Apache Tomcat DESCRIPTION:Weaponised and widely attempted. Apache Tomcat Missing Encryp tion of Sensitive Data Vulnerability\n\nCISA requires federal agencies t o remediate by 2026-08-07; treat it as a priority signal regardless of s ector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-34486/ URL:https://black-hat.co.uk/exploited/cve-2026-34486/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-9198@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260807 DTEND;VALUE=DATE:20260808 SUMMARY:Fix deadline: CVE-2026-9198 — IBM Langflow DESCRIPTION:Confirmed exploited in the wild. IBM Langflow Code Injection Vulnerability\n\nCISA requires federal agencies to remediate by 2026-08- 07; treat it as a priority signal regardless of sector.\n\nhttps://black -hat.co.uk/exploited/cve-2026-9198/ URL:https://black-hat.co.uk/exploited/cve-2026-9198/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2026-63077@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260808 DTEND;VALUE=DATE:20260809 SUMMARY:Fix deadline: CVE-2026-63077 — JetBrains TeamCity DESCRIPTION:Confirmed exploited in the wild. JetBrains TeamCity Deseriali zation of Untrusted Data Vulnerability\n\nCISA requires federal agencies to remediate by 2026-08-08; treat it as a priority signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve-2026-63077/ URL:https://black-hat.co.uk/exploited/cve-2026-63077/ TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cve-2025-68686@black-hat.co.uk DTSTAMP:20260805T232000Z DTSTART;VALUE=DATE:20260810 DTEND;VALUE=DATE:20260811 SUMMARY:Fix deadline: CVE-2025-68686 — Fortinet FortiOS DESCRIPTION:Confirmed exploited in the wild. Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\n\nCISA re quires federal agencies to remediate by 2026-08-10; treat it as a priori ty signal regardless of sector.\n\nhttps://black-hat.co.uk/exploited/cve -2025-68686/ URL:https://black-hat.co.uk/exploited/cve-2025-68686/ TRANSP:TRANSPARENT END:VEVENT END:VCALENDAR