# Newly exploited vulnerabilities: week of 27 July to 2 August 2026 (week 31)

Source: https://junglewise.ai/threats/exploited/2026-07-27  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 19:24 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-07-27.json  
License: CC BY 4.0 with a link back

In the week of 27 July to 2 August 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Arista Networks VeloCloud Orchestrator (1), followed by Cisco Secure Firewall Management Center (1) and Cisco Secure Firewall Management Center (FMC) (1).

## Newly exploited this week

- [CVE-2026-20316: Cisco Secure Firewall Management Center static credentials in web interface](https://junglewise.ai/threats/cve-2026-20316-cisco-secure-firewall-management-center-static-credentials-in-web) (critical, exploited in the wild, CVSS 5.3, exploited since 29 Jul 2026, published 29 Jul 2026)
- [CVE-2026-16812: Arista VeloCloud Orchestrator OS command injection in on-prem host](https://junglewise.ai/threats/cve-2026-16812-arista-velocloud-orchestrator-os-command-injection-in-on-prem) (critical, exploited in the wild, CVSS 10, exploited since 27 Jul 2026, published 27 Jul 2026)
- [CVE-2025-68686: Fortinet FortiOS information disclosure in SSL-VPN](https://junglewise.ai/threats/cve-2025-68686-fortinet-fortios-information-disclosure-in-ssl-vpn) (critical, exploited in the wild, CVSS 5.9, exploited since 27 Jul 2026, published 10 Feb 2026)

## Technologies hit most

1. [Arista Networks VeloCloud Orchestrator](https://junglewise.ai/threats/technologies/velocloud-orchestrator-on-prem): 1 vulnerability
2. [Cisco Secure Firewall Management Center](https://junglewise.ai/threats/technologies/secure-firewall-management-center): 1 vulnerability
3. [Cisco Secure Firewall Management Center (FMC)](https://junglewise.ai/threats/technologies/secure-firewall-management-center-fmc): 1 vulnerability
4. [Cisco Secure Firewall Management Center Software](https://junglewise.ai/threats/technologies/secure-firewall-management-center-software): 1 vulnerability
5. [Fortinet FortiOS](https://junglewise.ai/threats/technologies/fortios): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 27 July to 2 August 2026 (week 31)", https://junglewise.ai/threats/exploited/2026-07-27, 2 October 2026.