Junglewise

Weekly report · exploited in the wild

Newly exploited vulnerabilities: week of 17 to 23 August 2026 (week 34)

Final report, published . It does not change.

In the week of 17 to 23 August 2026, 9 vulnerabilities were newly recorded as exploited in the wild, 9 of them critical. The technology hit most was TrueConf Server (2), followed by Apple macOS (1) and Broadcom vCenter Server (1).

Newly exploited
9
Critical
9
Technologies hit
15

Newly exploited this week

Technologies hit most

  1. 1.TrueConf Server2 vulnerabilities
  2. 2.Apple macOS1 vulnerability
  3. 3.Broadcom vCenter Server1 vulnerability
  4. 4.Broadcom Vmware Vcenter1 vulnerability
  5. 5.Microsoft Internet Key Exchange (Ike) Service Extensions1 vulnerability
  6. 6.Microsoft Internet Key Exchange Service Extensions1 vulnerability
  7. 7.Microsoft SharePoint1 vulnerability
  8. 8.Microsoft SharePoint Enterprise Server 20161 vulnerability
  9. 9.Microsoft SharePoint Server 20191 vulnerability
  10. 10.Microsoft SharePoint Server Subscription Edition1 vulnerability
  11. 11.Microsoft Windows 101 vulnerability
  12. 12.Microsoft Windows 111 vulnerability
  13. 13.Mlflow1 vulnerability
  14. 14.mlflow (PyPI)1 vulnerability
  15. 15.ray (PyPI)1 vulnerability

How this is built

Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.

A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so. The date it was first recorded as exploited is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.

The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.

Use this data

The same data is at https://junglewise.ai/threats/exploited/2026-08-17.json, and this page as text at https://junglewise.ai/threats/exploited/2026-08-17.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.

Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 17 to 23 August 2026 (week 34)", https://junglewise.ai/threats/exploited/2026-08-17, 2 October 2026.