{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 7 to 13 September 2026 (week 37)","summary":"In the week of 7 to 13 September 2026, 14 vulnerabilities were newly recorded as exploited in the wild, 14 of them critical. The technology hit most was JFrog Artifactory (2), followed by Microsoft Windows (2) and MikroTik RouterOS (2).","url":"https://junglewise.ai/threats/exploited/2026-09-07","json_url":"https://junglewise.ai/threats/exploited/2026-09-07.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-09-07","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":14,"period":{"end":"2026-09-13","start":"2026-09-07"},"critical":14,"generated_at":"2026-10-02T19:23:09.012711+00:00","technologies":[{"hub":true,"name":"JFrog Artifactory","slug":"artifactory","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/artifactory"},{"hub":true,"name":"Microsoft Windows","slug":"windows-","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/windows-"},{"hub":true,"name":"MikroTik RouterOS","slug":"routeros","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/routeros"},{"hub":true,"name":"Adobe Commerce","slug":"commerce","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/commerce"},{"hub":true,"name":"Adobe Magento","slug":"magento","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/magento"},{"hub":true,"name":"Adobe Magento Enterprise Edition","slug":"magento-enterprise-edition","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/magento-enterprise-edition"},{"hub":true,"name":"Adobe Magento Open Source","slug":"magento-open-source","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/magento-open-source"},{"hub":true,"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center"},{"hub":true,"name":"Cisco Secure Firewall Management Center (FMC)","slug":"secure-firewall-management-center-fmc","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center-fmc"},{"hub":false,"name":"Cisco Security Cloud Control","slug":"security-cloud-control","vulnerabilities":1},{"hub":false,"name":"Cisco Security Cloud Control (Scc) Firewall Management","slug":"security-cloud-control-scc-firewall-management","vulnerabilities":1},{"hub":false,"name":"Cisco Security Cloud Control Firewall Management","slug":"security-cloud-control-firewall-management","vulnerabilities":1},{"hub":true,"name":"Citrix NetScaler","slug":"netscaler","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/netscaler"},{"hub":true,"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/netscaler-adc"},{"hub":true,"name":"Citrix NetScaler Gateway","slug":"gateway","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/gateway"}],"vulnerabilities":[{"cve":"CVE-2026-85706","cvss":10,"epss":0.9143,"slug":"cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.","severity":"critical","exploited":true,"published_at":"2026-09-12T03:16:30.473+00:00","technologies":[{"hub":true,"name":"GitLab Community Edition","slug":"gitlab-ce","vendor":{"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Enterprise Edition","slug":"gitlab-ee","vendor":{"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Community Edition","slug":"gitlab-ce","vendor":{"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Enterprise Edition","slug":"gitlab-ee","vendor":{"name":"GitLab","slug":"gitlab"}}],"exploited_since":"2026-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits"},{"cve":"CVE-2026-42018","epss":0.0981,"slug":"cve-2026-42018-jfrog-artifactory-improper-authentication-vulnerability","title":"JFrog Artifactory improper authentication vulnerability","severity":"critical","exploited":true,"published_at":"2026-09-11T00:00:00+00:00","technologies":[{"hub":true,"name":"JFrog Artifactory","slug":"artifactory","vendor":{"name":"JFrog","slug":"jfrog"}}],"exploited_since":"2026-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42018-jfrog-artifactory-improper-authentication-vulnerability"},{"cve":"CVE-2026-84869","cvss":9.9,"epss":0.0092,"slug":"cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and","title":"A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorizatio","severity":"critical","exploited":true,"published_at":"2026-09-08T20:18:51.147+00:00","technologies":[{"hub":true,"name":"ConnectWise ScreenConnect","slug":"screenconnect","vendor":{"name":"ConnectWise","slug":"connectwise"}}],"exploited_since":"2026-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and"},{"cve":"CVE-2026-42016","cvss":8.1,"epss":0.0864,"slug":"cve-2026-42016-jfrog-artifactory-privilege-escalation-via-improper-token-scope","title":"JFrog Artifactory privilege escalation via improper token scope validation","severity":"critical","exploited":true,"published_at":"2026-07-27T20:16:39.613+00:00","technologies":[{"hub":true,"name":"JFrog Artifactory","slug":"artifactory","vendor":{"name":"JFrog","slug":"jfrog"}}],"exploited_since":"2026-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42016-jfrog-artifactory-privilege-escalation-via-improper-token-scope"},{"cve":"CVE-2026-86060","cvss":9.8,"epss":0.0185,"slug":"cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege","title":"RouterOS contains an argument-handling flaw in the SSH login\npath involving usernames that begin with a prohibited character, allowing for t","severity":"critical","exploited":true,"published_at":"2026-09-05T20:17:18.703+00:00","technologies":[{"hub":true,"name":"MikroTik RouterOS","slug":"routeros","vendor":{"name":"MikroTik","slug":"mikrotik"}}],"exploited_since":"2026-09-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege"},{"cve":"CVE-2026-67277","cvss":8.2,"epss":0.0156,"slug":"cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service","title":"RouterOS accepts a \"related\" btest connection before the corresponding primary session has completed authentication. An unauthenticated clie","severity":"critical","exploited":true,"published_at":"2026-09-05T20:17:18.12+00:00","technologies":[{"hub":true,"name":"MikroTik RouterOS","slug":"routeros","vendor":{"name":"MikroTik","slug":"mikrotik"}}],"exploited_since":"2026-09-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service"},{"cve":"CVE-2026-87491","cvss":8.8,"epss":0.0314,"slug":"cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine","title":"Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via","severity":"critical","exploited":true,"published_at":"2026-09-09T01:17:05.887+00:00","technologies":[{"hub":true,"name":"Google Chrome","slug":"chrome","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Google Chromium","slug":"chromium","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Google Chromium V8","slug":"chromium-v8","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Microsoft Edge","slug":"edge-chromium-based","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Opera Browser","slug":"opera-browser","vendor":{"name":"Opera","slug":"opera"}}],"exploited_since":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine"},{"cve":"CVE-2026-19490","cvss":9.8,"epss":0.0701,"slug":"cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path","title":"Citrix NetScaler authentication bypass via alternate path","severity":"critical","exploited":true,"published_at":"2026-09-09T00:00:00+00:00","technologies":[{"hub":true,"name":"Citrix NetScaler","slug":"netscaler","vendor":{"name":"Citrix","slug":"citrix"}},{"hub":true,"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vendor":{"name":"Citrix","slug":"citrix"}},{"hub":true,"name":"Citrix NetScaler Gateway","slug":"gateway","vendor":{"name":"Citrix","slug":"citrix"}}],"exploited_since":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path"},{"cve":"CVE-2026-20079","cvss":10,"epss":0.8818,"slug":"cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web","title":"Cisco Secure Firewall Management Center auth bypass in web interface","severity":"critical","exploited":true,"published_at":"2026-03-04T18:16:24.23+00:00","technologies":[{"hub":true,"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Secure Firewall Management Center (FMC)","slug":"secure-firewall-management-center-fmc","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Security Cloud Control","slug":"security-cloud-control","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Security Cloud Control Firewall Management","slug":"security-cloud-control-firewall-management","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Security Cloud Control (Scc) Firewall Management","slug":"security-cloud-control-scc-firewall-management","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web"},{"cve":"CVE-2025-25249","cvss":8.1,"epss":0.0386,"slug":"cve-2025-25249-fortinet-fortios-heap-overflow-in-cw-acd-daemon","title":"Fortinet FortiOS heap overflow in cw_acd daemon","severity":"critical","exploited":true,"published_at":"2026-01-13T17:15:56.91+00:00","technologies":[{"hub":true,"name":"Fortinet FortiOS","slug":"fortios","vendor":{"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet Fortisase","slug":"fortisase","vendor":{"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiSwitchManager","slug":"fortiswitchmanager","vendor":{"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Siemens RUGGEDCOM APE1808","slug":"ruggedcom-ape1808","vendor":{"name":"Siemens","slug":"siemens"}}],"exploited_since":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-25249-fortinet-fortios-heap-overflow-in-cw-acd-daemon"},{"cve":"CVE-2026-85880","cvss":7.8,"epss":0.0362,"slug":"cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local","title":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","severity":"critical","exploited":true,"published_at":"2026-09-08T18:21:14.087+00:00","technologies":[{"hub":true,"name":"Microsoft Windows","slug":"windows-","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local"},{"cve":"CVE-2026-81963","cvss":7.8,"epss":0.0039,"slug":"cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in","title":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges l","severity":"critical","exploited":true,"published_at":"2026-09-08T18:21:00.09+00:00","technologies":[{"hub":true,"name":"Microsoft Windows","slug":"windows-","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft Windows Update Stack","slug":"windows-update-stack","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in"},{"cve":"CVE-2026-75650","cvss":10,"epss":0.0395,"slug":"cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template","title":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in ar","severity":"critical","exploited":true,"published_at":"2026-09-07T21:17:30.863+00:00","technologies":[{"hub":true,"name":"Adobe Commerce","slug":"commerce","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento","slug":"magento","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento Enterprise Edition","slug":"magento-enterprise-edition","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento Open Source","slug":"magento-open-source","vendor":{"name":"Adobe","slug":"adobe"}}],"exploited_since":"2026-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template"},{"cve":"CVE-2026-86218","cvss":9.8,"epss":0.1293,"slug":"cve-2026-86218-n-able-n-central-static-code-injection-vulnerability","title":"N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.","severity":"critical","exploited":true,"published_at":"2026-09-06T03:17:17.373+00:00","technologies":[{"hub":true,"name":"N-able N-central","slug":"n-central","vendor":{"name":"N-able","slug":"n-able"}}],"exploited_since":"2026-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-86218-n-able-n-central-static-code-injection-vulnerability"}],"previous":{"key":"2026-08-31","top":"PaperCut MF","total":10,"period":{"end":"2026-09-06","start":"2026-08-31"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-08-31"},"next":{"key":"2026-09-14","top":"Linux Kernel","total":7,"period":{"end":"2026-09-20","start":"2026-09-14"},"critical":7,"url":"https://junglewise.ai/threats/exploited/2026-09-14"}}