Weekly report · exploited in the wild
Newly exploited vulnerabilities: week of 22 to 28 June 2026 (week 26)
Final report, published . It does not change.
In the week of 22 to 28 June 2026, 6 vulnerabilities were newly recorded as exploited in the wild, 6 of them critical. The technology hit most was Ubiquiti Enterprise Fortress Gateway (3), followed by Ubiquiti UniFi Dream Machine Pro (3) and Ubiquiti UniFi Dream Machine Pro Max (3).
- Newly exploited
- 6
- Critical
- 6
- Technologies hit
- 15
Newly exploited this week
- CVE-2026-12569: PTC Windchill and FlexPLM remote code execution via deserializationcriticalCVSS 9.3Exploited since Published PTC FlexPLM, PTC Windchill, PTC Windchill PDMLink
- CVE-2026-20230: Cisco Unified Communications Manager SSRF in WebDialercriticalCVSS 8.6Exploited since Published Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition
- CVE-2026-34910: Ubiquiti UniFi OS command injection via improper input validationcriticalCVSS 10Exploited since Published Ubiquiti Enterprise Fortress Gateway, Ubiquiti UniFi Express, free5GC Udm
- CVE-2026-34909: Ubiquiti UniFi OS path traversal in underlying system filescriticalCVSS 10Exploited since Published Ubiquiti Enterprise Fortress Gateway, Ubiquiti UniFi Dream Machine Pro, Ubiquiti UniFi Dream Machine Pro Max
- CVE-2026-34908: Ubiquiti UniFi OS improper access controlcriticalCVSS 10Exploited since Published Ubiquiti Enterprise Fortress Gateway, free5GC Udm, Ubiquiti UniFi Dream Machine Pro
- CVE-2025-67038: Lantronix EDS5000 OS command injection in HTTP RPC modulecriticalCVSS 9.8Exploited since Published Lantronix Eds5000, Lantronix EDS5000 firmware, Lantronix EDS5000 series firmware
Technologies hit most
- 1.Ubiquiti Enterprise Fortress Gateway3 vulnerabilities
- 2.Ubiquiti UniFi Dream Machine Pro3 vulnerabilities
- 3.Ubiquiti UniFi Dream Machine Pro Max3 vulnerabilities
- 4.Ubiquiti UniFi Dream Machine Special Edition3 vulnerabilities
- 5.Ubiquiti UniFi Dream Router 5G3 vulnerabilities
- 6.Ubiquiti UniFi Dream Router 73 vulnerabilities
- 7.Ubiquiti UniFi Dream Wall3 vulnerabilities
- 8.Ubiquiti UniFi OS3 vulnerabilities
- 9.free5GC Udm2 vulnerabilities
- 10.free5GC Udr2 vulnerabilities
- 11.Cisco Unified Communications Manager1 vulnerability
- 12.Cisco Unified Communications Manager Session Management Edition1 vulnerability
- 13.Lantronix Eds50001 vulnerability
- 14.Lantronix EDS5000 firmware1 vulnerability
- 15.Lantronix EDS5000 series firmware1 vulnerability
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so. The date it was first recorded as exploited is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/exploited/2026-06-22.json, and this page as text at https://junglewise.ai/threats/exploited/2026-06-22.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 22 to 28 June 2026 (week 26)", https://junglewise.ai/threats/exploited/2026-06-22, 2 October 2026.