{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 27 July to 2 August 2026 (week 31)","summary":"In the week of 27 July to 2 August 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Arista Networks VeloCloud Orchestrator (1), followed by Cisco Secure Firewall Management Center (1) and Cisco Secure Firewall Management Center (FMC) (1).","url":"https://junglewise.ai/threats/exploited/2026-07-27","json_url":"https://junglewise.ai/threats/exploited/2026-07-27.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-07-27","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":3,"period":{"end":"2026-08-02","start":"2026-07-27"},"critical":3,"generated_at":"2026-10-02T19:24:09.297469+00:00","technologies":[{"hub":true,"name":"Arista Networks VeloCloud Orchestrator","slug":"velocloud-orchestrator-on-prem","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/velocloud-orchestrator-on-prem"},{"hub":true,"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center"},{"hub":true,"name":"Cisco Secure Firewall Management Center (FMC)","slug":"secure-firewall-management-center-fmc","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center-fmc"},{"hub":true,"name":"Cisco Secure Firewall Management Center Software","slug":"secure-firewall-management-center-software","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center-software"},{"hub":true,"name":"Fortinet FortiOS","slug":"fortios","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/fortios"}],"vulnerabilities":[{"cve":"CVE-2026-20316","cvss":5.3,"slug":"cve-2026-20316-cisco-secure-firewall-management-center-static-credentials-in-web","title":"Cisco Secure Firewall Management Center static credentials in web interface","severity":"critical","exploited":true,"published_at":"2026-07-29T17:16:51.84+00:00","technologies":[{"hub":true,"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Secure Firewall Management Center (FMC)","slug":"secure-firewall-management-center-fmc","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Secure Firewall Management Center Software","slug":"secure-firewall-management-center-software","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20316-cisco-secure-firewall-management-center-static-credentials-in-web"},{"cve":"CVE-2026-16812","cvss":10,"slug":"cve-2026-16812-arista-velocloud-orchestrator-os-command-injection-in-on-prem","title":"Arista VeloCloud Orchestrator OS command injection in on-prem host","severity":"critical","exploited":true,"published_at":"2026-07-27T16:17:03.64+00:00","technologies":[{"hub":true,"name":"Arista Networks VeloCloud Orchestrator","slug":"velocloud-orchestrator-on-prem","vendor":{"name":"Arista Networks","slug":"arista-networks"}}],"exploited_since":"2026-07-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-16812-arista-velocloud-orchestrator-os-command-injection-in-on-prem"},{"cve":"CVE-2025-68686","cvss":5.9,"epss":0.0048,"slug":"cve-2025-68686-fortinet-fortios-information-disclosure-in-ssl-vpn","title":"Fortinet FortiOS information disclosure in SSL-VPN","severity":"critical","exploited":true,"published_at":"2026-02-10T16:16:09.63+00:00","technologies":[{"hub":true,"name":"Fortinet FortiOS","slug":"fortios","vendor":{"name":"Fortinet","slug":"fortinet"}}],"exploited_since":"2026-07-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-68686-fortinet-fortios-information-disclosure-in-ssl-vpn"}],"previous":{"key":"2026-07-20","top":"Wordpress","total":6,"period":{"end":"2026-07-26","start":"2026-07-20"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-07-20"},"next":{"key":"2026-08-03","top":"N-able N-central","total":6,"period":{"end":"2026-08-09","start":"2026-08-03"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-08-03"}}