{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 12 to 18 October 2026 (week 42)","summary":"In the week of 12 to 18 October 2026, 9 vulnerabilities were newly recorded as exploited in the wild, 9 of them critical. The technology hit most was AhsayCBS (2), followed by Atlassian Bamboo Data Center (1) and Atlassian Bitbucket Data Center (1).","url":"https://junglewise.ai/threats/exploited/2026-10-12","json_url":"https://junglewise.ai/threats/exploited/2026-10-12.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-10-12","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":9,"period":{"end":"2026-10-18","start":"2026-10-12"},"critical":9,"generated_at":"2026-10-20T00:07:00.179834+00:00","technologies":[{"hub":false,"name":"AhsayCBS","slug":"ahsaycbs","vulnerabilities":2},{"hub":false,"name":"Atlassian Bamboo Data Center","slug":"bamboo-data-center","vulnerabilities":1},{"hub":false,"name":"Atlassian Bitbucket Data Center","slug":"bitbucket-data-center","vulnerabilities":1},{"hub":true,"name":"Atlassian Confluence Data Center","slug":"confluence-data-center","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/confluence-data-center"},{"hub":false,"name":"Atlassian Crowd Data Center","slug":"crowd-data-center","vulnerabilities":1},{"hub":false,"name":"Atlassian Crucible","slug":"crucible","vulnerabilities":1},{"hub":false,"name":"Atlassian Fisheye","slug":"fisheye","vulnerabilities":1},{"hub":false,"name":"Atlassian Jira Service Management Data Center","slug":"jira-service-management-data-center","vulnerabilities":1},{"hub":false,"name":"Atlassian Jira Software Data Center","slug":"jira-software-data-center","vulnerabilities":1},{"hub":false,"name":"Atlassian Multiple Products","slug":"atlassian-multiple-products","vulnerabilities":1},{"hub":true,"name":"BeyondTrust Remote Support","slug":"remote-support","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/remote-support"},{"hub":true,"name":"Cisco Secure Email Gateway","slug":"secure-email-gateway","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-email-gateway"},{"hub":true,"name":"Fortinet FortiOS","slug":"fortios","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/fortios"},{"hub":true,"name":"Fortinet FortiPAM","slug":"fortipam","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/fortipam"},{"hub":true,"name":"Fortinet FortiProxy","slug":"fortiproxy","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/fortiproxy"}],"vulnerabilities":[{"cve":"CVE-2026-102764","cvss":9.8,"epss":0.006,"slug":"cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing","title":"BeyondTrust Remote Support authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-15T21:17:00.117+00:00","technologies":[{"hub":true,"name":"BeyondTrust Remote Support","slug":"remote-support","vendor":{"hub":true,"name":"BeyondTrust","slug":"beyondtrust"}}],"exploited_since":"2026-10-16T18:26:05.237023+00:00","url":"https://junglewise.ai/threats/cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing"},{"cve":"CVE-2025-61624","cvss":6,"epss":0.0058,"slug":"cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli","title":"Fortinet multiple products path traversal in CLI","severity":"critical","exploited":true,"published_at":"2026-04-14T16:16:31.3+00:00","technologies":[{"hub":false,"name":"Fortinet Multiple Products","slug":"fortinet-multiple-products","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiOS","slug":"fortios","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiPAM","slug":"fortipam","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiProxy","slug":"fortiproxy","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiSwitchManager","slug":"fortiswitchmanager","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Siemens RUGGEDCOM APE1808","slug":"ruggedcom-ape1808","vendor":{"hub":true,"name":"Siemens","slug":"siemens"}}],"exploited_since":"2026-10-16T18:26:04.501573+00:00","url":"https://junglewise.ai/threats/cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli"},{"cve":"CVE-2026-21589","epss":0.0278,"slug":"cve-2026-21589-h3-summary-this-is-a-vulnerability-in-bitbucket-data-center","title":"Atlassian Data Center arbitrary file access without authentication","severity":"critical","exploited":true,"published_at":"2026-10-05T22:16:58.423+00:00","technologies":[{"hub":false,"name":"Atlassian Multiple Products","slug":"atlassian-multiple-products","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":false,"name":"Atlassian Bamboo Data Center","slug":"bamboo-data-center","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":false,"name":"Atlassian Bitbucket Data Center","slug":"bitbucket-data-center","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":true,"name":"Atlassian Confluence Data Center","slug":"confluence-data-center","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":false,"name":"Atlassian Crowd Data Center","slug":"crowd-data-center","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":false,"name":"Atlassian Crucible","slug":"crucible","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}}],"exploited_since":"2026-10-15T17:56:03.217157+00:00","url":"https://junglewise.ai/threats/cve-2026-21589-h3-summary-this-is-a-vulnerability-in-bitbucket-data-center"},{"cve":"CVE-2026-76519","slug":"cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability","title":"Cisco Secure Email Gateway relative path traversal","severity":"critical","exploited":true,"published_at":"2026-10-14T00:00:00+00:00","technologies":[{"hub":true,"name":"Cisco Secure Email Gateway","slug":"secure-email-gateway","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-10-14T20:11:06.395451+00:00","url":"https://junglewise.ai/threats/cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability"},{"cve":"CVE-2026-0322","slug":"cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability","title":"Palo Alto Networks PAN-OS code injection vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-14T00:00:00+00:00","technologies":[{"hub":true,"name":"Palo Alto Networks PAN-OS","slug":"pan-os","vendor":{"hub":true,"name":"Palo Alto Networks","slug":"palo-alto-networks"}}],"exploited_since":"2026-10-14T20:11:06.135095+00:00","url":"https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability"},{"cve":"CVE-2026-105133","cvss":7.3,"epss":0.0038,"slug":"cve-2026-105133-a-vulnerability-was-detected-in-ahsay-ahsaycbs-up-to-10-3-2-this","title":"Ahsay AhsayCBS authentication bypass in API","severity":"critical","exploited":true,"published_at":"2026-10-04T07:16:33.087+00:00","technologies":[{"hub":false,"name":"AhsayCBS","slug":"ahsaycbs","vendor":{"hub":false,"name":"Ahsay","slug":"ahsay"}}],"exploited_since":"2026-10-14T20:11:05.112315+00:00","url":"https://junglewise.ai/threats/cve-2026-105133-a-vulnerability-was-detected-in-ahsay-ahsaycbs-up-to-10-3-2-this"},{"cve":"CVE-2026-105134","cvss":10,"epss":0.0184,"slug":"cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this","title":"Ahsay AhsayCBS OS command injection in UpdateReceivers","severity":"critical","exploited":true,"published_at":"2026-10-04T07:16:33.48+00:00","technologies":[{"hub":false,"name":"AhsayCBS","slug":"ahsaycbs","vendor":{"hub":false,"name":"Ahsay","slug":"ahsay"}}],"exploited_since":"2026-10-14T20:11:04.823032+00:00","url":"https://junglewise.ai/threats/cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this"},{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","technologies":[{"hub":false,"name":"Microsoft Outlook Web","slug":"outlook-web","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows","slug":"windows-","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10 1607","slug":"windows-10-1607","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10 1809","slug":"windows-10-1809","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10 21h2","slug":"windows-10-21h2","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 10 22h2","slug":"windows-10-22h2","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-10-13T19:31:09.085024+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-104935","cvss":8.6,"epss":0.2598,"slug":"cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing","title":"Ivanti Connect Secure authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-13T16:17:11.64+00:00","technologies":[{"hub":true,"name":"Ivanti Connect Secure","slug":"connect-secure","vendor":{"hub":true,"name":"Ivanti","slug":"ivanti"}}],"exploited_since":"2026-10-13T15:46:04.459009+00:00","url":"https://junglewise.ai/threats/cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing"}],"previous":{"key":"2026-10-05","top":"@strapi/strapi (npm)","total":5,"period":{"end":"2026-10-11","start":"2026-10-05"},"critical":5,"url":"https://junglewise.ai/threats/exploited/2026-10-05"},"next":{"key":"2026-10-19","top":"Plex Media Server","total":8,"period":{"end":"2026-10-25","start":"2026-10-19"},"critical":8,"url":"https://junglewise.ai/threats/exploited/2026-10-19"}}