Weekly report · exploited in the wild
Newly exploited vulnerabilities: week of 12 to 18 October 2026 (week 42)
Final report, published . It does not change.
In the week of 12 to 18 October 2026, 9 vulnerabilities were newly recorded as exploited in the wild, 9 of them critical. The technology hit most was AhsayCBS (2), followed by Atlassian Bamboo Data Center (1) and Atlassian Bitbucket Data Center (1).
- Newly exploited
- 9
- Critical
- 9
- Technologies hit
- 15
Newly exploited this week
- CVE-2026-102764: BeyondTrust Remote Support authentication bypass by spoofingcriticalCVSS 9.8Exploited since Published BeyondTrust Remote Support
- CVE-2025-61624: Fortinet multiple products path traversal in CLIcriticalCVSS 6Exploited since Published Fortinet Multiple Products, Fortinet FortiOS, Fortinet FortiPAM
- CVE-2026-21589: Atlassian Data Center arbitrary file access without authenticationcriticalExploited since Published Atlassian Multiple Products, Atlassian Bamboo Data Center, Atlassian Bitbucket Data Center
- CVE-2026-76519: Cisco Secure Email Gateway relative path traversalcriticalExploited since Published Cisco Secure Email Gateway
- CVE-2026-0322: Palo Alto Networks PAN-OS code injection vulnerabilitycriticalExploited since Published Palo Alto Networks PAN-OS
- CVE-2026-105133: Ahsay AhsayCBS authentication bypass in APIcriticalCVSS 7.3Exploited since Published AhsayCBS
- CVE-2026-105134: Ahsay AhsayCBS OS command injection in UpdateReceiverscriticalCVSS 10Exploited since Published AhsayCBS
- CVE-2026-96951: Microsoft Windows command injection in ShellcriticalCVSS 8.8Exploited since Published Microsoft Outlook Web, Microsoft Windows, Microsoft Windows 10 1607
- CVE-2026-104935: Ivanti Connect Secure authentication bypass by spoofingcriticalCVSS 8.6Exploited since Published Ivanti Connect Secure
Technologies hit most
- 1.AhsayCBS2 vulnerabilities
- 2.Atlassian Bamboo Data Center1 vulnerability
- 3.Atlassian Bitbucket Data Center1 vulnerability
- 4.Atlassian Confluence Data Center1 vulnerability
- 5.Atlassian Crowd Data Center1 vulnerability
- 6.Atlassian Crucible1 vulnerability
- 7.Atlassian Fisheye1 vulnerability
- 8.Atlassian Jira Service Management Data Center1 vulnerability
- 9.Atlassian Jira Software Data Center1 vulnerability
- 10.Atlassian Multiple Products1 vulnerability
- 11.BeyondTrust Remote Support1 vulnerability
- 12.Cisco Secure Email Gateway1 vulnerability
- 13.Fortinet FortiOS1 vulnerability
- 14.Fortinet FortiPAM1 vulnerability
- 15.Fortinet FortiProxy1 vulnerability
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so. The date it was first recorded as exploited is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/exploited/2026-10-12.json, and this page as text at https://junglewise.ai/threats/exploited/2026-10-12.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 12 to 18 October 2026 (week 42)", https://junglewise.ai/threats/exploited/2026-10-12, 20 October 2026.