{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 8 to 14 June 2026 (week 24)","summary":"In the week of 8 to 14 June 2026, 7 vulnerabilities were newly recorded as exploited in the wild, 7 of them critical. The technology hit most was Arista EOS (1), followed by Berriai LiteLLM (1) and Check Point Mobile Access VPN (1).","url":"https://junglewise.ai/threats/exploited/2026-06-08","json_url":"https://junglewise.ai/threats/exploited/2026-06-08.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-06-08","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":7,"period":{"end":"2026-06-14","start":"2026-06-08"},"critical":7,"generated_at":"2026-10-02T19:24:09.297469+00:00","technologies":[{"hub":true,"name":"Arista EOS","slug":"eos","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/eos"},{"hub":true,"name":"Berriai LiteLLM","slug":"litellm","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/litellm"},{"hub":false,"name":"Check Point Mobile Access VPN","slug":"mobile-access-vpn","vulnerabilities":1},{"hub":false,"name":"Check Point Remote Access VPN","slug":"remote-access-vpn","vulnerabilities":1},{"hub":true,"name":"Check Point Security Gateway","slug":"security-gateway","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/security-gateway"},{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"hub":true,"name":"Google Chrome","slug":"chrome","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":true,"name":"Google Chromium V8","slug":"chromium-v8","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/chromium-v8"},{"hub":true,"name":"Ivanti Sentry","slug":"sentry","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/sentry"},{"hub":true,"name":"litellm (PyPI)","slug":"pypi-litellm","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/pypi-litellm"},{"hub":true,"name":"Microsoft Edge","slug":"edge-chromium-based","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/edge-chromium-based"},{"hub":true,"name":"Opera Software Opera-Browser","slug":"opera","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/opera"},{"hub":true,"name":"Oracle PeopleSoft Enterprise PeopleTools","slug":"peopletools","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/peopletools"}],"vulnerabilities":[{"cve":"CVE-2026-35273","cvss":9.8,"epss":0.0002,"slug":"cve-2026-35273-oracle-peoplesoft-peopletools-compromise-in-updates-environment","title":"Oracle PeopleSoft PeopleTools compromise in Updates Environment Management","severity":"critical","exploited":true,"published_at":"2026-06-11T04:16:53.68+00:00","technologies":[{"hub":true,"name":"Oracle PeopleSoft Enterprise PeopleTools","slug":"peopletools","vendor":{"name":"Oracle","slug":"oracle"}}],"exploited_since":"2026-06-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-35273-oracle-peoplesoft-peopletools-compromise-in-updates-environment"},{"cve":"CVE-2026-10520","cvss":10,"epss":0.0328,"slug":"cve-2026-10520-ivanti-sentry-os-command-injection-allows-remote-code-execution","title":"Ivanti Sentry OS command injection allows remote code execution","severity":"critical","exploited":true,"published_at":"2026-06-09T16:16:35.7+00:00","technologies":[{"hub":true,"name":"Ivanti Sentry","slug":"sentry","vendor":{"name":"Ivanti","slug":"ivanti"}}],"exploited_since":"2026-06-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-10520-ivanti-sentry-os-command-injection-allows-remote-code-execution"},{"cve":"CVE-2026-11645","cvss":8.8,"epss":0.0008,"slug":"cve-2026-11645-google-chrome-v8-out-of-bounds-read-and-write","title":"Google Chrome V8 out of bounds read and write","severity":"critical","exploited":true,"published_at":"2026-06-09T00:16:47.37+00:00","technologies":[{"hub":true,"name":"Google Chrome","slug":"chrome","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Google Chromium V8","slug":"chromium-v8","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Microsoft Edge","slug":"edge-chromium-based","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Opera Software Opera-Browser","slug":"opera","vendor":{"name":"Opera Software","slug":"opera-software"}}],"exploited_since":"2026-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-11645-google-chrome-v8-out-of-bounds-read-and-write"},{"cve":"CVE-2026-7473","cvss":5.8,"epss":0.0003,"slug":"cve-2026-7473-arista-eos-improper-tunnel-protocol-verification-in-decapsulation","title":"Arista EOS improper tunnel protocol verification in decapsulation","severity":"critical","exploited":true,"published_at":"2026-06-05T17:17:02.85+00:00","technologies":[{"hub":true,"name":"Arista EOS","slug":"eos","vendor":{"name":"Arista","slug":"arista"}},{"hub":true,"name":"Arista EOS","slug":"eos","vendor":{"name":"Arista","slug":"arista"}}],"exploited_since":"2026-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-7473-arista-eos-improper-tunnel-protocol-verification-in-decapsulation"},{"cve":"CVE-2026-20245","cvss":7.8,"epss":0.0008,"slug":"cve-2026-20245-cisco-catalyst-sd-wan-manager-privilege-escalation-in-cli","title":"Cisco Catalyst SD-WAN Manager privilege escalation in CLI","severity":"critical","exploited":true,"published_at":"2026-06-04T23:17:31.763+00:00","technologies":[{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20245-cisco-catalyst-sd-wan-manager-privilege-escalation-in-cli"},{"cve":"CVE-2026-50751","cvss":9.8,"epss":0.0001,"slug":"cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange","title":"Check Point VPN authentication bypass in IKEv1 key exchange","severity":"critical","exploited":true,"published_at":"2026-06-08T12:16:32.367+00:00","technologies":[{"hub":false,"name":"Check Point Mobile Access VPN","slug":"mobile-access-vpn","vendor":{"name":"Check Point","slug":"check-point"}},{"hub":false,"name":"Check Point Remote Access VPN","slug":"remote-access-vpn","vendor":{"name":"Check Point","slug":"check-point"}},{"hub":true,"name":"Check Point Security Gateway","slug":"security-gateway","vendor":{"name":"Check Point","slug":"check-point"}}],"exploited_since":"2026-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange"},{"cve":"CVE-2026-42271","cvss":8.8,"epss":0.1275,"slug":"cve-2026-42271-berriai-litellm-os-command-injection-in-mcp-test-endpoints","title":"BerriAI LiteLLM OS command injection in MCP test endpoints","severity":"critical","exploited":true,"published_at":"2026-05-08T04:16:21.82+00:00","technologies":[{"hub":true,"name":"Berriai LiteLLM","slug":"litellm","vendor":{"name":"Berriai","slug":"berriai"}},{"hub":true,"name":"litellm (PyPI)","slug":"pypi-litellm","vendor":{"name":"PyPI","slug":"pypi"}}],"exploited_since":"2026-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42271-berriai-litellm-os-command-injection-in-mcp-test-endpoints"}],"previous":{"key":"2026-06-01","top":"Android Laravel Framework","total":6,"period":{"end":"2026-06-07","start":"2026-06-01"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-06-01"},"next":{"key":"2026-06-15","top":"Cisco Catalyst SD-WAN Manager","total":4,"period":{"end":"2026-06-21","start":"2026-06-15"},"critical":4,"url":"https://junglewise.ai/threats/exploited/2026-06-15"}}