CVE-2026-33824

CVSS

—

EPSS

0.016 (75.0th percentile)

CISA KEV

Added 2026-08-18, due 2026-08-21

Exploitation

No report

Public exploits

2 repositories

State

Unknown

Coverage

• ● Actively exploitedCritical 85CISA advisories & alerts18 Aug, 12:00

  CISA Adds Four Known Exploited Vulnerabilities to Catalog

  CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability CVE-2026-55040 Microsoft SharePoint Weak Authentication…

  ↗cisa.gov/news-events/alerts/2026/08/18/cisa-add…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:47poc publishedpoc-in-github
2. 24 Sept, 12:27poc publishedpoc-in-github
3. 24 Sept, 12:14poc publishedpoc-in-github
4. 24 Sept, 11:51poc publishedpoc-in-github
5. 24 Sept, 11:50kev addedcisa-kev