// day
Jul 14, 2026
3 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Jul 14, 2026
Microsoft Active Directory Federation Services: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
› Microsoft Active Directory Federation Services
Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally. Added to CISA KEV on 2026-07-14.
CVE-2026-56155 - highclosedpatchedclosed Jul 14, 2026
Microsoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
› Microsoft SharePoint Server
Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. Added to CISA KEV on 2026-07-14.
CVE-2026-56164 - highclosedpatchedclosed Jul 14, 2026
SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
› SonicWall SMA1000 Appliances
SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. CISA added CVE-2026-15409, CVE-2026-15410 to the Known Exploited Vulnerabilities catalog on 2026-07-14 based on evidence of active exploitation.
CVE-2026-15409CVE-2026-15410
