# Newly exploited vulnerabilities: week of 10 to 16 August 2026 (week 33)

Source: https://junglewise.ai/threats/exploited/2026-08-10  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 19:23 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-08-10.json  
License: CC BY 4.0 with a link back

In the week of 10 to 16 August 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Cisco Adaptive Security Appliance Software (1), followed by Cisco Firepower Threat Defense Software (1) and Cisco Secure Firewall Adaptive Security Appliance (Asa) (1).

## Newly exploited this week

- [CVE-2026-68820: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.](https://junglewise.ai/threats/cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after) (critical, exploited in the wild, CVSS 7, exploited since 11 Aug 2026, published 11 Aug 2026)
- [CVE-2026-20349: A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software…](https://junglewise.ai/threats/cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn) (critical, exploited in the wild, CVSS 8.6, exploited since 11 Aug 2026, published 11 Aug 2026)
- [CVE-2026-72898: Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and…](https://junglewise.ai/threats/cve-2026-72898-metabase-sql-injection-in-password-reset-endpoint) (critical, exploited in the wild, CVSS 10, exploited since 11 Aug 2026, published 10 Aug 2026)

## Technologies hit most

1. [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 1 vulnerability
2. [Cisco Firepower Threat Defense Software](https://junglewise.ai/threats/technologies/firepower-threat-defense-software): 1 vulnerability
3. [Cisco Secure Firewall Adaptive Security Appliance (Asa)](https://junglewise.ai/threats/technologies/secure-firewall-adaptive-security-appliance-asa): 1 vulnerability
4. [Metabase](https://junglewise.ai/threats/technologies/metabase): 1 vulnerability
5. [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 1 vulnerability
6. [Microsoft Windows 10 1607](https://junglewise.ai/threats/technologies/windows-10-1607): 1 vulnerability
7. [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 1 vulnerability
8. [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 1 vulnerability
9. [Microsoft Windows 10 22h2](https://junglewise.ai/threats/technologies/windows-10-22h2): 1 vulnerability
10. [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 1 vulnerability
11. [Microsoft Windows 11 23h2](https://junglewise.ai/threats/technologies/windows-11-23h2): 1 vulnerability
12. [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 1 vulnerability
13. [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 1 vulnerability
14. [Microsoft Windows 11 Version 26H1](https://junglewise.ai/threats/technologies/windows-11-version-26h1): 1 vulnerability
15. [Microsoft Windows Ancillary Function Driver for WinSock](https://junglewise.ai/threats/technologies/windows-ancillary-function-driver-for-winsock): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 10 to 16 August 2026 (week 33)", https://junglewise.ai/threats/exploited/2026-08-10, 2 October 2026.