Update KEV: Thu Mar 19 00:20:24 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

known_exploited_vulnerabilities.json

@@ -1,9 +1,39 @@
 {
     "title": "CISA Catalog of Known Exploited Vulnerabilities",
-    "catalogVersion": "2026.03.16",
-    "dateReleased": "2026-03-16T16:37:30.6422Z",
-    "count": 1543,
+    "catalogVersion": "2026.03.18",
+    "dateReleased": "2026-03-18T19:24:20.2811Z",
+    "count": 1545,
     "vulnerabilities": [
+        {
+            "cveID": "CVE-2025-66376",
+            "vendorProject": "Synacor",
+            "product": "Zimbra Collaboration Suite (ZCS)",
+            "vulnerabilityName": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability",
+            "dateAdded": "2026-03-18",
+            "shortDescription": "Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2026-04-01",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/wiki.zimbra.com\/wiki\/Zimbra_Security_Advisories ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-66376",
+            "cwes": [
+                "CWE-79"
+            ]
+        },
+        {
+            "cveID": "CVE-2026-20963",
+            "vendorProject": "Microsoft",
+            "product": "SharePoint",
+            "vulnerabilityName": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability",
+            "dateAdded": "2026-03-18",
+            "shortDescription": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2026-03-21",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-20963 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-20963",
+            "cwes": [
+                "CWE-502"
+            ]
+        },
         {
             "cveID": "CVE-2025-47813",
             "vendorProject": "Wing FTP Server",
@@ -209,7 +239,7 @@
             "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
             "dueDate": "2026-03-24",
             "knownRansomwareCampaignUse": "Unknown",
-            "notes": "https:\/\/source.android.com\/docs\/security\/bulletin\/2026\/2026-03-01 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-21385",
+            "notes": "Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https:\/\/source.android.com\/docs\/security\/bulletin\/2026\/2026-03-01 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-21385",
             "cwes": [
                 "CWE-190"
             ]