CISA Flags KEV Flaws as Vulnerability Spike Hits 2,757 in Week

The CVE WATCHTOWER briefing highlights a rise in cyber threats with 2,757 new vulnerabilities discovered from July 13 to July 19, 2026, necessitating urgent actions from security teams. The Cybersecurity and Infrastructure Security Agency (CISA) added 10 vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical issues in Fortinet and Microsoft products.

Notable vulnerabilities include command injection bugs in Fortinet FortiSandbox and a severe Server-Side Request Forgery in SMA1000 Appliance. Emerging threats involve vulnerabilities in AI frameworks like IBM Langflow and Jupyter Enterprise Gateway, suggesting weak points in security processes. Immediate remediation strategies include patching vulnerable systems, isolating unpatched servers, and monitoring vendor risks to avert potential breaches.