{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 22 to 28 June 2026 (week 26)","summary":"In the week of 22 to 28 June 2026, 6 vulnerabilities were newly recorded as exploited in the wild, 6 of them critical. The technology hit most was Ubiquiti Enterprise Fortress Gateway (3), followed by Ubiquiti UniFi Dream Machine Pro (3) and Ubiquiti UniFi Dream Machine Pro Max (3).","url":"https://junglewise.ai/threats/exploited/2026-06-22","json_url":"https://junglewise.ai/threats/exploited/2026-06-22.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-06-22","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":6,"period":{"end":"2026-06-28","start":"2026-06-22"},"critical":6,"generated_at":"2026-10-02T19:24:09.297469+00:00","technologies":[{"hub":true,"name":"Ubiquiti Enterprise Fortress Gateway","slug":"efg","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/efg"},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Pro","slug":"udm-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/udm-pro"},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Pro Max","slug":"udm-pro-max","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/udm-pro-max"},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Special Edition","slug":"udm-se","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/udm-se"},{"hub":true,"name":"Ubiquiti UniFi Dream Router 5G","slug":"udr-5g","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/udr-5g"},{"hub":true,"name":"Ubiquiti UniFi Dream Router 7","slug":"udr7","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/udr7"},{"hub":true,"name":"Ubiquiti UniFi Dream Wall","slug":"udw","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/udw"},{"hub":true,"name":"Ubiquiti UniFi OS","slug":"unifi-os","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/unifi-os"},{"hub":true,"name":"free5GC Udm","slug":"udm","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/udm"},{"hub":true,"name":"free5GC Udr","slug":"udr","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/udr"},{"hub":true,"name":"Cisco Unified Communications Manager","slug":"unified-communications-manager","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/unified-communications-manager"},{"hub":false,"name":"Cisco Unified Communications Manager Session Management Edition","slug":"unified-communications-manager-session-management-edition","vulnerabilities":1},{"hub":false,"name":"Lantronix Eds5000","slug":"eds5000","vulnerabilities":1},{"hub":true,"name":"Lantronix EDS5000 firmware","slug":"eds5000-firmware","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/eds5000-firmware"},{"hub":false,"name":"Lantronix EDS5000 series firmware","slug":"eds5000-series-firmware","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-12569","cvss":9.3,"epss":0.005,"slug":"cve-2026-12569-ptc-windchill-and-flexplm-remote-code-execution-via","title":"PTC Windchill and FlexPLM remote code execution via deserialization","severity":"critical","exploited":true,"published_at":"2026-06-18T01:18:12.04+00:00","technologies":[{"hub":true,"name":"PTC FlexPLM","slug":"flexplm","vendor":{"name":"PTC","slug":"ptc"}},{"hub":false,"name":"PTC Windchill","slug":"windchill","vendor":{"name":"PTC","slug":"ptc"}},{"hub":false,"name":"PTC Windchill PDMLink","slug":"windchill-pdmlink","vendor":{"name":"PTC","slug":"ptc"}}],"exploited_since":"2026-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-12569-ptc-windchill-and-flexplm-remote-code-execution-via"},{"cve":"CVE-2026-20230","cvss":8.6,"epss":0.3416,"slug":"cve-2026-20230-cisco-unified-communications-manager-ssrf-in-webdialer","title":"Cisco Unified Communications Manager SSRF in WebDialer","severity":"critical","exploited":true,"published_at":"2026-06-03T18:16:20.16+00:00","technologies":[{"hub":true,"name":"Cisco Unified Communications Manager","slug":"unified-communications-manager","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Unified Communications Manager Session Management Edition","slug":"unified-communications-manager-session-management-edition","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20230-cisco-unified-communications-manager-ssrf-in-webdialer"},{"cve":"CVE-2026-34910","cvss":10,"epss":0.3362,"slug":"cve-2026-34910-ubiquiti-unifi-os-command-injection-via-improper-input-validation","title":"Ubiquiti UniFi OS command injection via improper input validation","severity":"critical","exploited":true,"published_at":"2026-05-22T02:16:34.527+00:00","technologies":[{"hub":true,"name":"Ubiquiti Enterprise Fortress Gateway","slug":"efg","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":false,"name":"Ubiquiti UniFi Express","slug":"express-7","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"free5GC Udm","slug":"udm","vendor":{"name":"free5GC","slug":"free5gc"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Pro","slug":"udm-pro","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Pro Max","slug":"udm-pro-max","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Special Edition","slug":"udm-se","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}}],"exploited_since":"2026-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34910-ubiquiti-unifi-os-command-injection-via-improper-input-validation"},{"cve":"CVE-2026-34909","cvss":10,"epss":0.009,"slug":"cve-2026-34909-ubiquiti-unifi-os-path-traversal-in-underlying-system-files","title":"Ubiquiti UniFi OS path traversal in underlying system files","severity":"critical","exploited":true,"published_at":"2026-05-22T02:16:34.39+00:00","technologies":[{"hub":true,"name":"Ubiquiti Enterprise Fortress Gateway","slug":"efg","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Pro","slug":"udm-pro","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Pro Max","slug":"udm-pro-max","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Special Edition","slug":"udm-se","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Router 5G","slug":"udr-5g","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Router 7","slug":"udr7","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}}],"exploited_since":"2026-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34909-ubiquiti-unifi-os-path-traversal-in-underlying-system-files"},{"cve":"CVE-2026-34908","cvss":10,"epss":0.0086,"slug":"cve-2026-34908-ubiquiti-unifi-os-improper-access-control","title":"Ubiquiti UniFi OS improper access control","severity":"critical","exploited":true,"published_at":"2026-05-22T02:16:34.24+00:00","technologies":[{"hub":true,"name":"Ubiquiti Enterprise Fortress Gateway","slug":"efg","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"free5GC Udm","slug":"udm","vendor":{"name":"free5GC","slug":"free5gc"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Pro","slug":"udm-pro","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Pro Max","slug":"udm-pro-max","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"Ubiquiti UniFi Dream Machine Special Edition","slug":"udm-se","vendor":{"name":"Ubiquiti","slug":"ubiquiti"}},{"hub":true,"name":"free5GC Udr","slug":"udr","vendor":{"name":"free5GC","slug":"free5gc"}}],"exploited_since":"2026-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34908-ubiquiti-unifi-os-improper-access-control"},{"cve":"CVE-2025-67038","cvss":9.8,"epss":0.0047,"slug":"cve-2025-67038-lantronix-eds5000-os-command-injection-in-http-rpc-module","title":"Lantronix EDS5000 OS command injection in HTTP RPC module","severity":"critical","exploited":true,"published_at":"2026-03-11T17:16:52.01+00:00","technologies":[{"hub":false,"name":"Lantronix Eds5000","slug":"eds5000","vendor":{"name":"Lantronix","slug":"lantronix"}},{"hub":true,"name":"Lantronix EDS5000 firmware","slug":"eds5000-firmware","vendor":{"name":"Lantronix","slug":"lantronix"}},{"hub":false,"name":"Lantronix EDS5000 series firmware","slug":"eds5000-series-firmware","vendor":{"name":"Lantronix","slug":"lantronix"}},{"hub":true,"name":"Lantronix EDS5008","slug":"eds5008","vendor":{"name":"Lantronix","slug":"lantronix"}},{"hub":true,"name":"Lantronix Eds5008 Firmware","slug":"eds5008-firmware","vendor":{"name":"Lantronix","slug":"lantronix"}},{"hub":true,"name":"Lantronix EDS5016","slug":"eds5016","vendor":{"name":"Lantronix","slug":"lantronix"}}],"exploited_since":"2026-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-67038-lantronix-eds5000-os-command-injection-in-http-rpc-module"}],"previous":{"key":"2026-06-15","top":"Cisco Catalyst SD-WAN Manager","total":4,"period":{"end":"2026-06-21","start":"2026-06-15"},"critical":4,"url":"https://junglewise.ai/threats/exploited/2026-06-15"},"next":{"key":"2026-06-29","top":"Microsoft SharePoint","total":2,"period":{"end":"2026-07-05","start":"2026-06-29"},"critical":2,"url":"https://junglewise.ai/threats/exploited/2026-06-29"}}