THREAT WATCH

Medium Cisco Secure Firewall Management Center (FMC): CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Medium Fortinet FortiOS: CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Critical Arista VeloCloud Orchestrator: CVE-2026-16812 — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Actively Exploited Check Point SmartConsole: CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability Critical Microsoft SharePoint: CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Medium WordPress Core: CVE-2026-60137 — WordPress Core SQL Injection Vulnerability Critical WordPress Core: CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability Critical Langflow Langflow: CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Medium Cisco Secure Firewall Management Center (FMC): CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Medium Fortinet FortiOS: CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Critical Arista VeloCloud Orchestrator: CVE-2026-16812 — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Actively Exploited Check Point SmartConsole: CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability Critical Microsoft SharePoint: CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Medium WordPress Core: CVE-2026-60137 — WordPress Core SQL Injection Vulnerability Critical WordPress Core: CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability Critical Langflow Langflow: CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Tag: cvss

29 Jul
2026

Reading a CVE: CVSS, EPSS and KEV explained

Vulnerability Management

Key takeaways A CVE record is an identifier and a description. It is not, on its own, a judgement about how urgent the vulnerability is for you. CVSS answers how bad exploitation would be, EPSS answers how likely exploitation is in the next 30 days, and CISA’s KEV catalog answers whether exploitation has actually been […]

► Necessary Cookies Always Active

Necessary cookies enable essential site features like secure log-ins and consent preference adjustments. They do not store personal data.

► Functional Cookies Remark

Functional cookies support features like content sharing on social media, collecting feedback, and enabling third-party tools.

► Analytical Cookies Remark

Analytical cookies track visitor interactions, providing insights on metrics like visitor count, bounce rate, and traffic sources.

► Advertisement Cookies Remark

Advertisement cookies deliver personalized ads based on your previous visits and analyze the effectiveness of ad campaigns.