{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 1 to 7 June 2026 (week 23)","summary":"In the week of 1 to 7 June 2026, 6 vulnerabilities were newly recorded as exploited in the wild, 6 of them critical. The technology hit most was Android Laravel Framework (1), followed by Google Android Framework (1) and Linux Kernel (1).","url":"https://junglewise.ai/threats/exploited/2026-06-01","json_url":"https://junglewise.ai/threats/exploited/2026-06-01.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-06-01","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":6,"period":{"end":"2026-06-07","start":"2026-06-01"},"critical":6,"generated_at":"2026-10-02T20:07:00.213787+00:00","technologies":[{"hub":true,"name":"Android Laravel Framework","slug":"framework","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/framework"},{"hub":true,"name":"Google Android Framework","slug":"android-framework","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/android-framework"},{"hub":true,"name":"Linux Kernel","slug":"kernel","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"name":"Microsoft Internet Explorer","slug":"internet-explorer","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/internet-explorer"},{"hub":false,"name":"Mirasvit Full Page Cache Warmer","slug":"full-page-cache-warmer","vulnerabilities":1},{"hub":true,"name":"Oracle WebLogic Server","slug":"weblogic-server","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/weblogic-server"},{"hub":true,"name":"SolarWinds Serv-U","slug":"serv-u","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/serv-u"}],"vulnerabilities":[{"cve":"CVE-2026-28318","cvss":7.5,"epss":0.0006,"slug":"cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request","title":"SolarWinds Serv-U denial of service via crafted POST request","severity":"critical","exploited":true,"published_at":"2026-06-04T15:16:50.407+00:00","technologies":[{"hub":true,"name":"SolarWinds Serv-U","slug":"serv-u","vendor":{"name":"SolarWinds","slug":"solarwinds"}}],"exploited_since":"2026-06-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request"},{"cve":"CVE-2010-0249","cvss":9.3,"epss":0.9006,"slug":"cve-2010-0249-microsoft-internet-explorer-use-after-free-in-html-object-handling","title":"Microsoft Internet Explorer use-after-free in HTML object handling","severity":"critical","exploited":true,"published_at":"2026-06-03T00:00:00+00:00","technologies":[{"hub":true,"name":"Microsoft Internet Explorer","slug":"internet-explorer","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-06-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-0249-microsoft-internet-explorer-use-after-free-in-html-object-handling"},{"cve":"CVE-2026-45247","cvss":9.8,"epss":0.0014,"slug":"cve-2026-45247-mirasvit-full-page-cache-warmer-php-object-injection-in-cookie","title":"Mirasvit Full Page Cache Warmer PHP object injection in cookie","severity":"critical","exploited":true,"published_at":"2026-05-26T15:16:39.263+00:00","technologies":[{"hub":false,"name":"Mirasvit Full Page Cache Warmer","slug":"full-page-cache-warmer","vendor":{"name":"Mirasvit","slug":"mirasvit"}},{"hub":false,"name":"Mirasvit Full Page Cache Warmer","slug":"full-page-cache-warmer","vendor":{"name":"Mirasvit","slug":"mirasvit"}}],"exploited_since":"2026-06-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-45247-mirasvit-full-page-cache-warmer-php-object-injection-in-cookie"},{"cve":"CVE-2022-0492","cvss":7.8,"epss":0.0524,"slug":"cve-2022-0492-linux-kernel-privilege-escalation-in-cgroups-v1-release-agent","title":"Linux Kernel privilege escalation in cgroups v1 release_agent","severity":"critical","exploited":true,"published_at":"2026-06-02T00:00:00+00:00","technologies":[{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"name":"Linux","slug":"linux"}}],"exploited_since":"2026-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0492-linux-kernel-privilege-escalation-in-cgroups-v1-release-agent"},{"cve":"CVE-2025-48595","cvss":7.8,"epss":0.0001,"slug":"cve-2025-48595-google-android-framework-privilege-escalation-via-integer","title":"Google Android Framework privilege escalation via integer overflow","severity":"critical","exploited":true,"published_at":"2026-06-01T22:16:18.093+00:00","technologies":[{"hub":true,"name":"Google Android Framework","slug":"android-framework","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Android Laravel Framework","slug":"framework","vendor":{"name":"Android","slug":"android"}}],"exploited_since":"2026-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48595-google-android-framework-privilege-escalation-via-integer"},{"cve":"CVE-2024-21182","cvss":7.5,"epss":0.8767,"slug":"cve-2024-21182-oracle-weblogic-server-unspecified-vulnerability-in-core","title":"Oracle WebLogic Server unspecified vulnerability in Core component","severity":"critical","exploited":true,"published_at":"2026-06-01T00:00:00+00:00","technologies":[{"hub":true,"name":"Oracle WebLogic Server","slug":"weblogic-server","vendor":{"name":"Oracle","slug":"oracle"}}],"exploited_since":"2026-06-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21182-oracle-weblogic-server-unspecified-vulnerability-in-core"}],"previous":{"key":"2026-05-25","top":"TanStack","total":5,"period":{"end":"2026-05-31","start":"2026-05-25"},"critical":5,"url":"https://junglewise.ai/threats/exploited/2026-05-25"},"next":{"key":"2026-06-08","top":"Arista EOS","total":7,"period":{"end":"2026-06-14","start":"2026-06-08"},"critical":7,"url":"https://junglewise.ai/threats/exploited/2026-06-08"}}