Weekly report · exploited in the wild
Newly exploited vulnerabilities: week of 10 to 16 August 2026 (week 33)
Final report, published . It does not change.
In the week of 10 to 16 August 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Cisco Adaptive Security Appliance Software (1), followed by Cisco Firepower Threat Defense Software (1) and Cisco Secure Firewall Adaptive Security Appliance (Asa) (1).
- Newly exploited
- 3
- Critical
- 3
- Technologies hit
- 15
Newly exploited this week
- CVE-2026-68820: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.criticalCVSS 7Exploited since Published Microsoft Windows 10, Microsoft Windows 10 1607, Microsoft Windows 10 1809
- CVE-2026-20349: A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software…criticalCVSS 8.6Exploited since Published Cisco Adaptive Security Appliance Software, Cisco Firepower Threat Defense Software, Cisco Secure Firewall Adaptive Security Appliance (Asa)
- CVE-2026-72898: Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and…criticalCVSS 10Exploited since Published Metabase
Technologies hit most
- 1.Cisco Adaptive Security Appliance Software1 vulnerability
- 2.Cisco Firepower Threat Defense Software1 vulnerability
- 3.Cisco Secure Firewall Adaptive Security Appliance (Asa)1 vulnerability
- 4.Metabase1 vulnerability
- 5.Microsoft Windows 101 vulnerability
- 6.Microsoft Windows 10 16071 vulnerability
- 7.Microsoft Windows 10 18091 vulnerability
- 8.Microsoft Windows 10 21h21 vulnerability
- 9.Microsoft Windows 10 22h21 vulnerability
- 10.Microsoft Windows 111 vulnerability
- 11.Microsoft Windows 11 23h21 vulnerability
- 12.Microsoft Windows 11 24h21 vulnerability
- 13.Microsoft Windows 11 25h21 vulnerability
- 14.Microsoft Windows 11 Version 26H11 vulnerability
- 15.Microsoft Windows Ancillary Function Driver for WinSock1 vulnerability
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so. The date it was first recorded as exploited is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/exploited/2026-08-10.json, and this page as text at https://junglewise.ai/threats/exploited/2026-08-10.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 10 to 16 August 2026 (week 33)", https://junglewise.ai/threats/exploited/2026-08-10, 2 October 2026.