# Newly exploited vulnerabilities: week of 24 to 30 August 2026 (week 35)

Source: https://junglewise.ai/threats/exploited/2026-08-24  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 19:23 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-08-24.json  
License: CC BY 4.0 with a link back

In the week of 24 to 30 August 2026, 11 vulnerabilities were newly recorded as exploited in the wild, 11 of them critical. The technology hit most was Linux Kernel (2), followed by Ajax.net Professional (1) and AjaxNetProfessional (NuGet) (1).

## Newly exploited this week

- [CVE-2023-49105: ownCloud improper authentication vulnerability](https://junglewise.ai/threats/cve-2023-49105-owncloud-improper-authentication-vulnerability) (critical, exploited in the wild, exploited since 27 Aug 2026, published 27 Aug 2026)
- [CVE-2026-66384: An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.](https://junglewise.ai/threats/cve-2026-66384-jfrog-artifactory-path-traversal-in-docker-cache) (critical, exploited in the wild, CVSS 5.3, exploited since 27 Aug 2026, published 12 Aug 2026)
- [CVE-2026-53362: Linux Kernel buffer overflow in IPv6 paged allocation](https://junglewise.ai/threats/cve-2026-53362-linux-kernel-buffer-overflow-in-ipv6-paged-allocation) (critical, exploited in the wild, CVSS 6.2, exploited since 27 Aug 2026, published 4 Jul 2026)
- [CVE-2019-1068: Microsoft SQL Server remote code execution](https://junglewise.ai/threats/cve-2019-1068-microsoft-sql-server-remote-code-execution) (critical, exploited in the wild, exploited since 26 Aug 2026, published 26 Aug 2026)
- [CVE-2022-0995: Linux Kernel out-of-bounds write vulnerability](https://junglewise.ai/threats/cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability) (critical, exploited in the wild, exploited since 26 Aug 2026, published 26 Aug 2026)
- [CVE-2015-3246: Red Hat Libuser race condition in passwd file handling](https://junglewise.ai/threats/cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling) (critical, exploited in the wild, exploited since 26 Aug 2026, published 26 Aug 2026)
- [CVE-2015-5287: Red Hat ABRT privilege escalation via symlink attack](https://junglewise.ai/threats/cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack) (critical, exploited in the wild, CVSS 7, exploited since 26 Aug 2026, published 26 Aug 2026)
- [CVE-2026-8452: NetScaler ADC and Gateway memory overflow in Gateway or AAA virtual server](https://junglewise.ai/threats/cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa) (critical, exploited in the wild, CVSS 8.8, exploited since 26 Aug 2026, published 30 Jun 2026)
- [CVE-2021-23758: Remote Code Execution in AjaxNetProfessional](https://junglewise.ai/threats/cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 3.1, exploited since 26 Aug 2026, published 7 Dec 2021)
- [CVE-2026-60004: Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.](https://junglewise.ai/threats/cve-2026-60004-gitea-code-injection-in-diffpatch-api) (critical, exploited in the wild, CVSS 9.8, exploited since 25 Aug 2026, published 26 Aug 2026)
- [CVE-2026-21962: Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware…](https://junglewise.ai/threats/cve-2026-21962-oracle-http-server-and-oracle-weblogic-server-proxy-plug-in) (critical, exploited in the wild, CVSS 10, exploited since 24 Aug 2026, published 20 Jan 2026)

## Technologies hit most

1. [Linux Kernel](https://junglewise.ai/threats/technologies/kernel): 2 vulnerabilities
2. Ajax.net Professional: 1 vulnerability
3. [AjaxNetProfessional (NuGet)](https://junglewise.ai/threats/technologies/ajaxnetprofessional): 1 vulnerability
4. [Citrix NetScaler ADC](https://junglewise.ai/threats/technologies/netscaler-adc): 1 vulnerability
5. [Citrix NetScaler Gateway](https://junglewise.ai/threats/technologies/gateway): 1 vulnerability
6. [code.gitea.io/gitea (Go)](https://junglewise.ai/threats/technologies/code-gitea-io-gitea): 1 vulnerability
7. [Gitea](https://junglewise.ai/threats/technologies/gitea): 1 vulnerability
8. [gitea.dev (Go)](https://junglewise.ai/threats/technologies/gitea-dev): 1 vulnerability
9. [JFrog Artifactory](https://junglewise.ai/threats/technologies/artifactory): 1 vulnerability
10. [Microsoft SQL Server](https://junglewise.ai/threats/technologies/sql-server): 1 vulnerability
11. [Oracle Weblogic Server Proxy Plug-In](https://junglewise.ai/threats/technologies/oracle-weblogic-server-proxy-plug-in): 1 vulnerability
12. [Owncloud](https://junglewise.ai/threats/technologies/owncloud): 1 vulnerability
13. Red Hat Automatic Bug Reporting Tool: 1 vulnerability
14. [Red Hat Enterprise Linux](https://junglewise.ai/threats/technologies/red-hat-enterprise-linux): 1 vulnerability
15. Red Hat Libuser: 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 24 to 30 August 2026 (week 35)", https://junglewise.ai/threats/exploited/2026-08-24, 2 October 2026.