{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 11 to 17 May 2026 (week 20)","summary":"In the week of 11 to 17 May 2026, 2 vulnerabilities were newly recorded as exploited in the wild, 2 of them critical. The technology hit most was Cisco Catalyst Sd-Wan (1), followed by Cisco Catalyst SD-WAN Controller (1) and Cisco Catalyst SD-WAN Controller (vSmart) (1).","url":"https://junglewise.ai/threats/exploited/2026-05-11","json_url":"https://junglewise.ai/threats/exploited/2026-05-11.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-05-11","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":2,"period":{"end":"2026-05-17","start":"2026-05-11"},"critical":2,"generated_at":"2026-10-02T20:07:00.213787+00:00","technologies":[{"hub":false,"name":"Cisco Catalyst Sd-Wan","slug":"catalyst-sd-wan","vulnerabilities":1},{"hub":false,"name":"Cisco Catalyst SD-WAN Controller","slug":"catalyst-sd-wan-controller","vulnerabilities":1},{"hub":false,"name":"Cisco Catalyst SD-WAN Controller (vSmart)","slug":"catalyst-sd-wan-controller-vsmart","vulnerabilities":1},{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"hub":false,"name":"Cisco Catalyst SD-WAN Manager (vManage)","slug":"catalyst-sd-wan-manager-vmanage","vulnerabilities":1},{"hub":false,"name":"Cisco Catalyst SD-WAN Validator","slug":"catalyst-sd-wan-validator","vulnerabilities":1},{"hub":false,"name":"Cisco Catalyst SD-WAN Validator (vBond)","slug":"catalyst-sd-wan-validator-vbond","vulnerabilities":1},{"hub":false,"name":"Microsoft","slug":"microsoft","vulnerabilities":1},{"hub":true,"name":"Microsoft Exchange Server","slug":"exchange-server","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/exchange-server"}],"vulnerabilities":[{"cve":"CVE-2026-42897","cvss":8.1,"epss":0.0022,"slug":"cve-2026-42897-microsoft-exchange-server-cross-site-scripting-in-outlook-web","title":"Microsoft Exchange Server cross-site scripting in Outlook Web Access","severity":"critical","exploited":true,"published_at":"2026-05-14T18:16:49.36+00:00","technologies":[{"hub":true,"name":"Microsoft Exchange Server","slug":"exchange-server","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft","slug":"microsoft","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-05-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42897-microsoft-exchange-server-cross-site-scripting-in-outlook-web"},{"cve":"CVE-2026-20182","cvss":10,"epss":0.779,"slug":"cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism","title":"Cisco Catalyst SD-WAN authentication bypass in peering mechanism","severity":"critical","exploited":true,"published_at":"2026-05-14T17:16:19.387+00:00","technologies":[{"hub":false,"name":"Cisco Catalyst Sd-Wan","slug":"catalyst-sd-wan","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Catalyst SD-WAN Controller","slug":"catalyst-sd-wan-controller","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Catalyst SD-WAN Controller (vSmart)","slug":"catalyst-sd-wan-controller-vsmart","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Catalyst SD-WAN Manager (vManage)","slug":"catalyst-sd-wan-manager-vmanage","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Catalyst SD-WAN Validator","slug":"catalyst-sd-wan-validator","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-05-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism"}],"previous":{"key":"2026-05-04","top":"Berriai LiteLLM","total":3,"period":{"end":"2026-05-10","start":"2026-05-04"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-05-04"},"next":{"key":"2026-05-18","top":"Microsoft Defender","total":9,"period":{"end":"2026-05-24","start":"2026-05-18"},"critical":9,"url":"https://junglewise.ai/threats/exploited/2026-05-18"}}