Changes in August 2026

In CISA made 25 changes to its list that its own file does not keep.

  1. CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-inEdited: required action.
  2. CVE-2026-69836 Microsoft Entra IDRemoved from CISA's list.
  3. CVE-2021-43226 Microsoft WindowsRansomware use: Unknown to Known.
  4. CVE-2020-5135 SonicWall SonicOSRansomware use: Unknown to Known.
  5. CVE-2012-0158 Microsoft MSCOMCTL.OCXRansomware use: Unknown to Known.
  6. CVE-2025-62593 Ray-Project RayDeadline moved from 21 August 2026 to 20 August 2026. Listing date changed from 18 August 2026 to 17 August 2026.
  7. CVE-2025-60710 Microsoft WindowsRansomware use: Unknown to Known.
  8. CVE-2022-21882 Microsoft Win32kRansomware use: Unknown to Known.
  9. CVE-2021-4034 Red Hat PolkitRansomware use: Unknown to Known.
  10. CVE-2020-29574 Sophos CyberoamOSRansomware use: Unknown to Known.
  11. CVE-2020-0968 Microsoft Internet ExplorerRansomware use: Unknown to Known.
  12. CVE-2020-0618 Microsoft SQL ServerRansomware use: Unknown to Known.
  13. CVE-2019-5591 Fortinet FortiOSRansomware use: Unknown to Known.
  14. CVE-2019-0803 Microsoft Win32kRansomware use: Unknown to Known.
  15. CVE-2018-0802 Microsoft OfficeRansomware use: Unknown to Known.
  16. CVE-2016-0189 Microsoft Internet ExplorerRansomware use: Unknown to Known.
  17. CVE-2026-45659 Microsoft SharePoint ServerRansomware use: Unknown to Known.
  18. CVE-2026-34486 Apache TomcatEdited: description.
  19. CVE-2025-42999 SAP NetWeaverRansomware use: Unknown to Known.
  20. CVE-2025-24813 Apache TomcatEdited: description.
  21. CVE-2025-8088 RARLAB WinRARRansomware use: Unknown to Known.
  22. CVE-2024-23692 Rejetto HTTP File ServerRansomware use: Unknown to Known.
  23. CVE-2025-26399 SolarWinds Web Help DeskRansomware use: Unknown to Known.
  24. CVE-2026-15410 SonicWall SMA1000 AppliancesRansomware use: Unknown to Known.
  25. CVE-2026-15409 SonicWall SMA1000 AppliancesRansomware use: Unknown to Known.