{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 19 to 25 October 2026 (week 43)","summary":"In the week of 19 to 25 October 2026, 8 vulnerabilities were newly recorded as exploited in the wild, 8 of them critical. The technology hit most was Plex Media Server (4), followed by Arista Velocloud Orchestrator (1) and Collabora Online – Built-In Code Server (1).","url":"https://junglewise.ai/threats/exploited/2026-10-19","json_url":"https://junglewise.ai/threats/exploited/2026-10-19.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-10-19","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":8,"period":{"end":"2026-10-25","start":"2026-10-19"},"critical":8,"generated_at":"2026-10-27T00:07:00.150062+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/media-server"},{"hub":false,"name":"Arista Velocloud Orchestrator","slug":"arista-velocloud-orchestrator","vulnerabilities":1},{"hub":false,"name":"Collabora Online – Built-In Code Server","slug":"collabora-online-built-in-code-server","vulnerabilities":1},{"hub":false,"name":"Collabora Online CODE Server (richdocumentscode)","slug":"online-code-server-richdocumentscode","vulnerabilities":1},{"hub":false,"name":"EG Secure Solutions SiteGuard Server Edition","slug":"siteguard-server-edition","vulnerabilities":1},{"hub":false,"name":"Siemens Software Center","slug":"siemens-software-center","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-110447","epss":0.0123,"slug":"cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303","title":"Collabora Online CODE Server OS command injection in proxy.php","severity":"critical","exploited":true,"published_at":"2026-10-14T03:17:20.683+00:00","technologies":[{"hub":false,"name":"Collabora Online – Built-In Code Server","slug":"collabora-online-built-in-code-server","vendor":{"hub":false,"name":"Collabora","slug":"collabora"}},{"hub":false,"name":"Collabora Online CODE Server (richdocumentscode)","slug":"online-code-server-richdocumentscode","vendor":{"hub":false,"name":"Collabora","slug":"collabora"}}],"exploited_since":"2026-10-23T20:16:03.153854+00:00","url":"https://junglewise.ai/threats/cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303"},{"cve":"CVE-2026-114625","cvss":9.9,"epss":0.0056,"slug":"cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where","title":"Arista VeloCloud Orchestrator privilege escalation","severity":"critical","exploited":true,"published_at":"2026-10-22T21:17:16.87+00:00","technologies":[{"hub":false,"name":"Arista Velocloud Orchestrator","slug":"arista-velocloud-orchestrator","vendor":{"hub":true,"name":"Arista","slug":"arista"}}],"exploited_since":"2026-10-23T17:51:03.688829+00:00","url":"https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where"},{"cve":"CVE-2026-110936","cvss":6.7,"epss":0.0014,"slug":"cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center","title":"Siemens Software Center DLL sideloading vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-15T15:17:30.383+00:00","technologies":[{"hub":false,"name":"Siemens Software Center","slug":"siemens-software-center","vendor":{"hub":true,"name":"Siemens","slug":"siemens"}}],"exploited_since":"2026-10-20T20:01:09.876749+00:00","url":"https://junglewise.ai/threats/cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center"},{"cve":"CVE-2026-96655","cvss":4.3,"epss":0.0022,"slug":"cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated","title":"Plex Media Server SSRF via transcode endpoint","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.677+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vendor":{"hub":true,"name":"Plex","slug":"plex"}}],"exploited_since":"2026-10-20T20:01:06.9595+00:00","url":"https://junglewise.ai/threats/cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated"},{"cve":"CVE-2026-106931","cvss":7.8,"epss":0.0066,"slug":"cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection","title":"EG Secure Solutions SiteGuard Server Edition OS command injection","severity":"critical","exploited":true,"published_at":"2026-10-14T05:16:42.633+00:00","technologies":[{"hub":false,"name":"EG Secure Solutions SiteGuard Server Edition","slug":"siteguard-server-edition","vendor":{"hub":false,"name":"EG Secure Solutions","slug":"eg-secure-solutions"}}],"exploited_since":"2026-10-20T20:01:06.904136+00:00","url":"https://junglewise.ai/threats/cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection"},{"cve":"CVE-2026-96652","cvss":4.3,"epss":0.0022,"slug":"cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player","title":"Plex Media Server SSRF via /player/timeline","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.363+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vendor":{"hub":true,"name":"Plex","slug":"plex"}}],"exploited_since":"2026-10-20T20:01:06.869259+00:00","url":"https://junglewise.ai/threats/cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player"},{"cve":"CVE-2026-96654","cvss":6.5,"epss":0.0023,"slug":"cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly","title":"Plex Media Server unsafe URL neutralization in searchOne","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.517+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vendor":{"hub":true,"name":"Plex","slug":"plex"}}],"exploited_since":"2026-10-20T20:01:06.677505+00:00","url":"https://junglewise.ai/threats/cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly"},{"cve":"CVE-2026-96656","cvss":7.2,"epss":0.004,"slug":"cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to","title":"Plex Media Server arbitrary file write in transcoder options","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.84+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vendor":{"hub":true,"name":"Plex","slug":"plex"}}],"exploited_since":"2026-10-20T20:01:06.626134+00:00","url":"https://junglewise.ai/threats/cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to"}],"previous":{"key":"2026-10-12","top":"AhsayCBS","total":9,"period":{"end":"2026-10-18","start":"2026-10-12"},"critical":9,"url":"https://junglewise.ai/threats/exploited/2026-10-12"},"next":{"key":"2026-10-26","top":"Amazon AWS","total":10,"period":{"end":"2026-11-01","start":"2026-10-26"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-10-26"}}