{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 24 to 30 August 2026 (week 35)","summary":"In the week of 24 to 30 August 2026, 11 vulnerabilities were newly recorded as exploited in the wild, 11 of them critical. The technology hit most was Linux Kernel (2), followed by Ajax.net Professional (1) and AjaxNetProfessional (NuGet) (1).","url":"https://junglewise.ai/threats/exploited/2026-08-24","json_url":"https://junglewise.ai/threats/exploited/2026-08-24.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-08-24","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":11,"period":{"end":"2026-08-30","start":"2026-08-24"},"critical":11,"generated_at":"2026-10-02T19:23:09.012711+00:00","technologies":[{"hub":true,"name":"Linux Kernel","slug":"kernel","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":false,"name":"Ajax.net Professional","slug":"ajax-net-professional","vulnerabilities":1},{"hub":true,"name":"AjaxNetProfessional (NuGet)","slug":"ajaxnetprofessional","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/ajaxnetprofessional"},{"hub":true,"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/netscaler-adc"},{"hub":true,"name":"Citrix NetScaler Gateway","slug":"gateway","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/gateway"},{"hub":true,"name":"code.gitea.io/gitea (Go)","slug":"code-gitea-io-gitea","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/code-gitea-io-gitea"},{"hub":true,"name":"Gitea","slug":"gitea","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/gitea"},{"hub":true,"name":"gitea.dev (Go)","slug":"gitea-dev","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/gitea-dev"},{"hub":true,"name":"JFrog Artifactory","slug":"artifactory","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/artifactory"},{"hub":true,"name":"Microsoft SQL Server","slug":"sql-server","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/sql-server"},{"hub":true,"name":"Oracle Weblogic Server Proxy Plug-In","slug":"oracle-weblogic-server-proxy-plug-in","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/oracle-weblogic-server-proxy-plug-in"},{"hub":true,"name":"Owncloud","slug":"owncloud","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/owncloud"},{"hub":false,"name":"Red Hat Automatic Bug Reporting Tool","slug":"automatic-bug-reporting-tool","vulnerabilities":1},{"hub":true,"name":"Red Hat Enterprise Linux","slug":"red-hat-enterprise-linux","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/red-hat-enterprise-linux"},{"hub":false,"name":"Red Hat Libuser","slug":"libuser","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2023-49105","epss":0.4292,"slug":"cve-2023-49105-owncloud-improper-authentication-vulnerability","title":"ownCloud improper authentication vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-27T00:00:00+00:00","technologies":[{"hub":true,"name":"Owncloud","slug":"owncloud","vendor":{"name":"ownCloud","slug":"owncloud"}}],"exploited_since":"2026-08-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-49105-owncloud-improper-authentication-vulnerability"},{"cve":"CVE-2026-66384","cvss":5.3,"epss":0.0067,"slug":"cve-2026-66384-jfrog-artifactory-path-traversal-in-docker-cache","title":"An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.","severity":"critical","exploited":true,"published_at":"2026-08-12T16:17:14.52+00:00","technologies":[{"hub":true,"name":"JFrog Artifactory","slug":"artifactory","vendor":{"name":"JFrog","slug":"jfrog"}}],"exploited_since":"2026-08-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-66384-jfrog-artifactory-path-traversal-in-docker-cache"},{"cve":"CVE-2026-53362","cvss":6.2,"epss":0.0071,"slug":"cve-2026-53362-linux-kernel-buffer-overflow-in-ipv6-paged-allocation","title":"Linux Kernel buffer overflow in IPv6 paged allocation","severity":"critical","exploited":true,"published_at":"2026-07-04T12:17:02.113+00:00","technologies":[{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"name":"Linux","slug":"linux"}},{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"name":"Linux","slug":"linux"}},{"hub":true,"name":"Red Hat Enterprise Linux","slug":"red-hat-enterprise-linux","vendor":{"name":"Red Hat","slug":"red-hat"}},{"hub":false,"name":"SUSE Linux Enterprise","slug":"suse-linux-enterprise","vendor":{"name":"Suse","slug":"suse"}}],"exploited_since":"2026-08-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-53362-linux-kernel-buffer-overflow-in-ipv6-paged-allocation"},{"cve":"CVE-2019-1068","epss":0.5791,"slug":"cve-2019-1068-microsoft-sql-server-remote-code-execution","title":"Microsoft SQL Server remote code execution","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","technologies":[{"hub":true,"name":"Microsoft SQL Server","slug":"sql-server","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1068-microsoft-sql-server-remote-code-execution"},{"cve":"CVE-2022-0995","epss":0.0879,"slug":"cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability","title":"Linux Kernel out-of-bounds write vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","technologies":[{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"name":"Linux","slug":"linux"}},{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"name":"Linux","slug":"linux"}}],"exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability"},{"cve":"CVE-2015-3246","epss":0.088,"slug":"cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling","title":"Red Hat Libuser race condition in passwd file handling","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","technologies":[{"hub":false,"name":"Red Hat Libuser","slug":"libuser","vendor":{"name":"Red Hat","slug":"red-hat"}}],"exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling"},{"cve":"CVE-2015-5287","cvss":7,"epss":0.0496,"slug":"cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack","title":"Red Hat ABRT privilege escalation via symlink attack","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","technologies":[{"hub":false,"name":"Red Hat Automatic Bug Reporting Tool","slug":"automatic-bug-reporting-tool","vendor":{"name":"Red Hat","slug":"red-hat"}}],"exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack"},{"cve":"CVE-2026-8452","cvss":8.8,"epss":0.0101,"slug":"cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa","title":"NetScaler ADC and Gateway memory overflow in Gateway or AAA virtual server","severity":"critical","exploited":true,"published_at":"2026-06-30T13:19:33.45+00:00","technologies":[{"hub":true,"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vendor":{"name":"Citrix","slug":"citrix"}},{"hub":true,"name":"Citrix NetScaler Gateway","slug":"gateway","vendor":{"name":"Citrix","slug":"citrix"}}],"exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa"},{"cve":"CVE-2021-23758","cvss":3.1,"epss":0.8258,"slug":"cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data","title":"Remote Code Execution in AjaxNetProfessional","severity":"critical","exploited":true,"published_at":"2021-12-07T21:21:49+00:00","technologies":[{"hub":false,"name":"Ajax.net Professional","slug":"ajax-net-professional","vendor":{"name":"Ajax.net Professional","slug":"ajax-net-professional"}},{"hub":true,"name":"AjaxNetProfessional (NuGet)","slug":"ajaxnetprofessional","vendor":{"name":"NuGet","slug":"nuget"}}],"exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data"},{"cve":"CVE-2026-60004","cvss":9.8,"epss":0.2399,"slug":"cve-2026-60004-gitea-code-injection-in-diffpatch-api","title":"Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.","severity":"critical","exploited":true,"published_at":"2026-08-26T20:17:56.01+00:00","technologies":[{"hub":true,"name":"code.gitea.io/gitea (Go)","slug":"code-gitea-io-gitea","vendor":{"name":"Go","slug":"go"}},{"hub":true,"name":"Gitea","slug":"gitea","vendor":{"name":"Gitea","slug":"gitea"}},{"hub":true,"name":"gitea.dev (Go)","slug":"gitea-dev","vendor":{"name":"Go","slug":"go"}}],"exploited_since":"2026-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-60004-gitea-code-injection-in-diffpatch-api"},{"cve":"CVE-2026-21962","cvss":10,"epss":0.7092,"slug":"cve-2026-21962-oracle-http-server-and-oracle-weblogic-server-proxy-plug-in","title":"Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Serve","severity":"critical","exploited":true,"published_at":"2026-01-20T22:15:59.11+00:00","technologies":[{"hub":true,"name":"Oracle Weblogic Server Proxy Plug-In","slug":"oracle-weblogic-server-proxy-plug-in","vendor":{"name":"Oracle","slug":"oracle"}},{"hub":true,"name":"Oracle Weblogic Server Proxy Plug-In","slug":"oracle-weblogic-server-proxy-plug-in","vendor":{"name":"Oracle","slug":"oracle"}}],"exploited_since":"2026-08-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21962-oracle-http-server-and-oracle-weblogic-server-proxy-plug-in"}],"previous":{"key":"2026-08-17","top":"TrueConf Server","total":9,"period":{"end":"2026-08-23","start":"2026-08-17"},"critical":9,"url":"https://junglewise.ai/threats/exploited/2026-08-17"},"next":{"key":"2026-08-31","top":"PaperCut MF","total":10,"period":{"end":"2026-09-06","start":"2026-08-31"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-08-31"}}