Weekly report · exploited in the wild
Newly exploited vulnerabilities: week of 3 to 9 August 2026 (week 32)
Final report, published . It does not change.
In the week of 3 to 9 August 2026, 6 vulnerabilities were newly recorded as exploited in the wild, 6 of them critical. The technology hit most was N-able N-central (2), followed by Apache Software Foundation Apache Tomcat Tribes (1) and Apache Tomcat (1).
- Newly exploited
- 6
- Critical
- 6
- Technologies hit
- 9
Newly exploited this week
- CVE-2026-8037: Progress LoadMaster OS command injection in APIcriticalCVSS 9.6Exploited since Published Progress ADC, Progress Connection Manager for ObjectScale, Progress ECS Connection Manager
- CVE-2026-63077: JetBrains TeamCity remote code execution in agent polling protocolcriticalCVSS 9.8Exploited since Published Jetbrains TeamCity
- CVE-2026-18556: Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass…criticalCVSS 7.4Exploited since Published N-able N-central
- CVE-2026-9198: IBM Langflow OSS remote code execution via auto-login bypasscriticalCVSS 9.8Exploited since Published IBM Langflow
- CVE-2026-34486: Apache Tomcat encryption bypass in EncryptInterceptorcriticalCVSS 7.5Exploited since Published Apache Tomcat, Apache Software Foundation Apache Tomcat Tribes
- CVE-2026-18577: An incomplete patch for allows for authentication bypass and account takeover in N-central Versions through 2026.3.1criticalCVSS 8.1Exploited since Published N-able N-central
Technologies hit most
- 1.N-able N-central2 vulnerabilities
- 2.Apache Software Foundation Apache Tomcat Tribes1 vulnerability
- 3.Apache Tomcat1 vulnerability
- 4.IBM Langflow1 vulnerability
- 5.Jetbrains TeamCity1 vulnerability
- 6.Progress ADC1 vulnerability
- 7.Progress Connection Manager for ObjectScale1 vulnerability
- 8.Progress ECS Connection Manager1 vulnerability
- 9.Progress LoadMaster1 vulnerability
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so. The date it was first recorded as exploited is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/exploited/2026-08-03.json, and this page as text at https://junglewise.ai/threats/exploited/2026-08-03.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 3 to 9 August 2026 (week 32)", https://junglewise.ai/threats/exploited/2026-08-03, 2 October 2026.