{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 10 to 16 August 2026 (week 33)","summary":"In the week of 10 to 16 August 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Cisco Adaptive Security Appliance Software (1), followed by Cisco Firepower Threat Defense Software (1) and Cisco Secure Firewall Adaptive Security Appliance (Asa) (1).","url":"https://junglewise.ai/threats/exploited/2026-08-10","json_url":"https://junglewise.ai/threats/exploited/2026-08-10.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-08-10","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":3,"period":{"end":"2026-08-16","start":"2026-08-10"},"critical":3,"generated_at":"2026-10-02T19:23:09.012711+00:00","technologies":[{"hub":true,"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-asa-software"},{"hub":true,"name":"Cisco Firepower Threat Defense Software","slug":"firepower-threat-defense-software","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense-software"},{"hub":true,"name":"Cisco Secure Firewall Adaptive Security Appliance (Asa)","slug":"secure-firewall-adaptive-security-appliance-asa","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-adaptive-security-appliance-asa"},{"hub":true,"name":"Metabase","slug":"metabase","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/metabase"},{"hub":true,"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"hub":true,"name":"Microsoft Windows 10 1607","slug":"windows-10-1607","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-10-1607"},{"hub":true,"name":"Microsoft Windows 10 1809","slug":"windows-10-1809","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-10-1809"},{"hub":true,"name":"Microsoft Windows 10 21h2","slug":"windows-10-21h2","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-10-21h2"},{"hub":true,"name":"Microsoft Windows 10 22h2","slug":"windows-10-22h2","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-10-22h2"},{"hub":true,"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"hub":true,"name":"Microsoft Windows 11 23h2","slug":"windows-11-23h2","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-11-23h2"},{"hub":true,"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"hub":true,"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"hub":true,"name":"Microsoft Windows 11 Version 26H1","slug":"windows-11-version-26h1","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-11-version-26h1"},{"hub":true,"name":"Microsoft Windows Ancillary Function Driver for WinSock","slug":"windows-ancillary-function-driver-for-winsock","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-ancillary-function-driver-for-winsock"}],"vulnerabilities":[{"cve":"CVE-2026-68820","cvss":7,"epss":0.0033,"slug":"cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after","title":"Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","severity":"critical","exploited":true,"published_at":"2026-08-11T17:19:06.357+00:00","technologies":[{"hub":true,"name":"Microsoft Windows 10","slug":"windows-10","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10 1607","slug":"windows-10-1607","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10 1809","slug":"windows-10-1809","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10 21h2","slug":"windows-10-21h2","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10 22h2","slug":"windows-10-22h2","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 11","slug":"windows-11","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-08-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after"},{"cve":"CVE-2026-20349","cvss":8.6,"epss":0.0101,"slug":"cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn","title":"A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure F","severity":"critical","exploited":true,"published_at":"2026-08-11T17:17:48.833+00:00","technologies":[{"hub":true,"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Firepower Threat Defense Software","slug":"firepower-threat-defense-software","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Secure Firewall Adaptive Security Appliance (Asa)","slug":"secure-firewall-adaptive-security-appliance-asa","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Firepower Threat Defense Software","slug":"firepower-threat-defense-software","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-08-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn"},{"cve":"CVE-2026-72898","cvss":10,"epss":0.1905,"slug":"cve-2026-72898-metabase-sql-injection-in-password-reset-endpoint","title":"Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrato","severity":"critical","exploited":true,"published_at":"2026-08-10T18:18:53.3+00:00","technologies":[{"hub":true,"name":"Metabase","slug":"metabase","vendor":{"name":"Metabase","slug":"metabase"}}],"exploited_since":"2026-08-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-72898-metabase-sql-injection-in-password-reset-endpoint"}],"previous":{"key":"2026-08-03","top":"N-able N-central","total":6,"period":{"end":"2026-08-09","start":"2026-08-03"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-08-03"},"next":{"key":"2026-08-17","top":"TrueConf Server","total":9,"period":{"end":"2026-08-23","start":"2026-08-17"},"critical":9,"url":"https://junglewise.ai/threats/exploited/2026-08-17"}}