{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 3 to 9 August 2026 (week 32)","summary":"In the week of 3 to 9 August 2026, 6 vulnerabilities were newly recorded as exploited in the wild, 6 of them critical. The technology hit most was N-able N-central (2), followed by Apache Software Foundation Apache Tomcat Tribes (1) and Apache Tomcat (1).","url":"https://junglewise.ai/threats/exploited/2026-08-03","json_url":"https://junglewise.ai/threats/exploited/2026-08-03.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-08-03","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":6,"period":{"end":"2026-08-09","start":"2026-08-03"},"critical":6,"generated_at":"2026-10-02T19:23:09.012711+00:00","technologies":[{"hub":true,"name":"N-able N-central","slug":"n-central","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/n-central"},{"hub":false,"name":"Apache Software Foundation Apache Tomcat Tribes","slug":"tomcat-tribes","vulnerabilities":1},{"hub":true,"name":"Apache Tomcat","slug":"tomcat","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/tomcat"},{"hub":true,"name":"IBM Langflow","slug":"langflow-oss","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/langflow-oss"},{"hub":true,"name":"Jetbrains TeamCity","slug":"teamcity","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/teamcity"},{"hub":true,"name":"Progress ADC","slug":"adc","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/adc"},{"hub":false,"name":"Progress Connection Manager for ObjectScale","slug":"connection-manager-for-objectscale","vulnerabilities":1},{"hub":false,"name":"Progress ECS Connection Manager","slug":"ecs-connection-manager","vulnerabilities":1},{"hub":false,"name":"Progress LoadMaster","slug":"loadmaster","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-8037","cvss":9.6,"epss":0.8479,"slug":"cve-2026-8037-progress-loadmaster-os-command-injection-in-api","title":"Progress LoadMaster OS command injection in API","severity":"critical","exploited":true,"published_at":"2026-06-04T14:16:45.177+00:00","technologies":[{"hub":true,"name":"Progress ADC","slug":"adc","vendor":{"name":"Progress","slug":"progress"}},{"hub":false,"name":"Progress Connection Manager for ObjectScale","slug":"connection-manager-for-objectscale","vendor":{"name":"Progress","slug":"progress"}},{"hub":false,"name":"Progress ECS Connection Manager","slug":"ecs-connection-manager","vendor":{"name":"Progress","slug":"progress"}},{"hub":false,"name":"Progress LoadMaster","slug":"loadmaster","vendor":{"name":"Progress","slug":"progress"}}],"exploited_since":"2026-08-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-8037-progress-loadmaster-os-command-injection-in-api"},{"cve":"CVE-2026-63077","cvss":9.8,"epss":0.0065,"slug":"cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling","title":"JetBrains TeamCity remote code execution in agent polling protocol","severity":"critical","exploited":true,"published_at":"2026-07-27T17:16:38.83+00:00","technologies":[{"hub":true,"name":"Jetbrains TeamCity","slug":"teamcity","vendor":{"name":"Jetbrains","slug":"jetbrains"}}],"exploited_since":"2026-08-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling"},{"cve":"CVE-2026-18556","cvss":7.4,"epss":0.0788,"slug":"cve-2026-18556-n-able-n-central-authentication-bypass-via-alternate-path","title":"Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects","severity":"critical","exploited":true,"published_at":"2026-08-01T20:16:37.157+00:00","technologies":[{"hub":true,"name":"N-able N-central","slug":"n-central","vendor":{"name":"N-able","slug":"n-able"}}],"exploited_since":"2026-08-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-18556-n-able-n-central-authentication-bypass-via-alternate-path"},{"cve":"CVE-2026-9198","cvss":9.8,"epss":0.0189,"slug":"cve-2026-9198-ibm-langflow-oss-remote-code-execution-via-auto-login-bypass","title":"IBM Langflow OSS remote code execution via auto-login bypass","severity":"critical","exploited":true,"published_at":"2026-07-17T18:17:17.34+00:00","technologies":[{"hub":true,"name":"IBM Langflow","slug":"langflow-oss","vendor":{"name":"IBM","slug":"ibm"}}],"exploited_since":"2026-08-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-9198-ibm-langflow-oss-remote-code-execution-via-auto-login-bypass"},{"cve":"CVE-2026-34486","cvss":7.5,"epss":0.0656,"slug":"cve-2026-34486-apache-tomcat-encryption-bypass-in-encryptinterceptor","title":"Apache Tomcat encryption bypass in EncryptInterceptor","severity":"critical","exploited":true,"published_at":"2026-04-09T20:16:25.063+00:00","technologies":[{"hub":true,"name":"Apache Tomcat","slug":"tomcat","vendor":{"name":"Apache","slug":"apache"}},{"hub":false,"name":"Apache Software Foundation Apache Tomcat Tribes","slug":"tomcat-tribes","vendor":{"name":"Apache Software Foundation","slug":"apache-software-foundation"}}],"exploited_since":"2026-08-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34486-apache-tomcat-encryption-bypass-in-encryptinterceptor"},{"cve":"CVE-2026-18577","cvss":8.1,"epss":0.1462,"slug":"cve-2026-18577-n-able-n-central-authentication-bypass-and-account-takeover","title":"An incomplete patch for allows for authentication bypass and account takeover in N-central Versions through 2026.3.1","severity":"critical","exploited":true,"published_at":"2026-08-02T23:16:26.21+00:00","technologies":[{"hub":true,"name":"N-able N-central","slug":"n-central","vendor":{"name":"N-able","slug":"n-able"}}],"exploited_since":"2026-08-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-18577-n-able-n-central-authentication-bypass-and-account-takeover"}],"previous":{"key":"2026-07-27","top":"Arista Networks VeloCloud Orchestrator","total":3,"period":{"end":"2026-08-02","start":"2026-07-27"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-07-27"},"next":{"key":"2026-08-10","top":"Cisco Adaptive Security Appliance Software","total":3,"period":{"end":"2026-08-16","start":"2026-08-10"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-08-10"}}