# Newly exploited vulnerabilities: week of 11 to 17 May 2026 (week 20)

Source: https://junglewise.ai/threats/exploited/2026-05-11  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 20:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-05-11.json  
License: CC BY 4.0 with a link back

In the week of 11 to 17 May 2026, 2 vulnerabilities were newly recorded as exploited in the wild, 2 of them critical. The technology hit most was Cisco Catalyst Sd-Wan (1), followed by Cisco Catalyst SD-WAN Controller (1) and Cisco Catalyst SD-WAN Controller (vSmart) (1).

## Newly exploited this week

- [CVE-2026-42897: Microsoft Exchange Server cross-site scripting in Outlook Web Access](https://junglewise.ai/threats/cve-2026-42897-microsoft-exchange-server-cross-site-scripting-in-outlook-web) (critical, exploited in the wild, CVSS 8.1, exploited since 15 May 2026, published 14 May 2026)
- [CVE-2026-20182: Cisco Catalyst SD-WAN authentication bypass in peering mechanism](https://junglewise.ai/threats/cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism) (critical, exploited in the wild, CVSS 10, exploited since 14 May 2026, published 14 May 2026)

## Technologies hit most

1. Cisco Catalyst Sd-Wan: 1 vulnerability
2. Cisco Catalyst SD-WAN Controller: 1 vulnerability
3. Cisco Catalyst SD-WAN Controller (vSmart): 1 vulnerability
4. [Cisco Catalyst SD-WAN Manager](https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager): 1 vulnerability
5. Cisco Catalyst SD-WAN Manager (vManage): 1 vulnerability
6. Cisco Catalyst SD-WAN Validator: 1 vulnerability
7. Cisco Catalyst SD-WAN Validator (vBond): 1 vulnerability
8. Microsoft: 1 vulnerability
9. [Microsoft Exchange Server](https://junglewise.ai/threats/technologies/exchange-server): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 11 to 17 May 2026 (week 20)", https://junglewise.ai/threats/exploited/2026-05-11, 2 October 2026.