Flaws added in August 2023
From Exploited flaws, HARD’s guide to the flaws being used in attacks
This article lists the flaws CISA added in August 2023. For the newest, see Exploited flaws.
In August 2023, CISA added 8 flaws to its list of vulnerabilities being used in attacks, 2 of them in things people have at home; 3 have been used by ransomware gangs. Most came from RARLAB (1), Ignite Realtime (1) and Ivanti (1).[1]
Three of the eight let an attacker take over the product, running their own code or taking full control.
List of flaws
Every flaw CISA added in August 2023, newest first, in plain English, each with an article of its own.[2] marks the ones used in ransomware.
Show
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-38831† Used in ransomwareAt home |
WinRAR. Attackers can run their own code on WinRAR. | At home |
CVE-2023-32315At work |
Ignite Realtime Openfire. Attackers can read files on Ignite Realtime Openfire that should be out of reach from anywhere, without logging in. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-38035† Used in ransomwareAt work |
Ivanti Sentry. Attackers can get into Ivanti Sentry without a valid password. | At work |
CVE-2023-27532† Used in ransomwareAt work |
Veeam Backup & Replication. Attackers can get into Veeam Backup & Replication without a valid password. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-26359At work |
Adobe ColdFusion. Attackers can run their own code on Adobe ColdFusion. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-24489At work |
Citrix Content Collaboration. Attackers can reach parts of Citrix Content Collaboration that should be locked to them from anywhere, without logging in. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-38180At work |
Microsoft .NET Core and Visual Studio. Attackers can crash Microsoft .NET Core and Visual Studio or stop it working. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2017-18368At home |
Zyxel P660HN-T1A Routers. Attackers can run commands on Zyxel P660HN-T1A Routers from anywhere, without logging in. | At home |
Companies
The flaws were in eight companies’ products; the most were in Adobe’s (1).
Other months
Every month since CISA started the list; August 2023 is outlined.
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026 | 17 | 28 | 26 | 31 | 21 | 23 | 26 | 31 | 43 | 36 | 282 | ||
| 2025 | 14 | 27 | 32 | 15 | 24 | 20 | 20 | 15 | 16 | 31 | 11 | 20 | 245 |
| 2024 | 21 | 9 | 10 | 10 | 14 | 9 | 14 | 19 | 25 | 17 | 22 | 16 | 186 |
| 2023 | 5 | 14 | 18 | 17 | 19 | 24 | 16 | 8 | 19 | 18 | 18 | 11 | 187 |
| 2022 | 40 | 32 | 226 | 45 | 83 | 48 | 3 | 23 | 24 | 12 | 10 | 9 | 555 |
| 2021 | 291 | 20 | 311 |
References
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”. Version 2026.10.30, updated 30 Oct 2026. CISA adds a flaw when it has reliable evidence of it being used in attacks; the date is when it was added, not when the attacks began.
- ^ HARD. Plain-English summaries written from CISA’s and NVD’s text, on each flaw’s page.
See also Exploited flaws, Companies, and Search for any app or company.