# Newly exploited vulnerabilities: week of 19 to 25 October 2026 (week 43)

Source: https://junglewise.ai/threats/exploited/2026-10-19  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 27 October 2026, 00:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-10-19.json  
License: CC BY 4.0 with a link back

In the week of 19 to 25 October 2026, 8 vulnerabilities were newly recorded as exploited in the wild, 8 of them critical. The technology hit most was Plex Media Server (4), followed by Arista Velocloud Orchestrator (1) and Collabora Online – Built-In Code Server (1).

## Newly exploited this week

- [CVE-2026-110447: Collabora Online CODE Server OS command injection in proxy.php](https://junglewise.ai/threats/cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303) (critical, exploited in the wild, exploited since 23 Oct 2026, published 14 Oct 2026)
- [CVE-2026-114625: Arista VeloCloud Orchestrator privilege escalation](https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where) (critical, exploited in the wild, CVSS 9.9, exploited since 23 Oct 2026, published 22 Oct 2026)
- [CVE-2026-110936: Siemens Software Center DLL sideloading vulnerability](https://junglewise.ai/threats/cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center) (critical, exploited in the wild, CVSS 6.7, exploited since 20 Oct 2026, published 15 Oct 2026)
- [CVE-2026-96655: Plex Media Server SSRF via transcode endpoint](https://junglewise.ai/threats/cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated) (critical, exploited in the wild, CVSS 4.3, exploited since 20 Oct 2026, published 23 Sep 2026)
- [CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS command injection](https://junglewise.ai/threats/cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection) (critical, exploited in the wild, CVSS 7.8, exploited since 20 Oct 2026, published 14 Oct 2026)
- [CVE-2026-96652: Plex Media Server SSRF via /player/timeline](https://junglewise.ai/threats/cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player) (critical, exploited in the wild, CVSS 4.3, exploited since 20 Oct 2026, published 23 Sep 2026)
- [CVE-2026-96654: Plex Media Server unsafe URL neutralization in searchOne](https://junglewise.ai/threats/cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly) (critical, exploited in the wild, CVSS 6.5, exploited since 20 Oct 2026, published 23 Sep 2026)
- [CVE-2026-96656: Plex Media Server arbitrary file write in transcoder options](https://junglewise.ai/threats/cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to) (critical, exploited in the wild, CVSS 7.2, exploited since 20 Oct 2026, published 23 Sep 2026)

## Technologies hit most

1. [Plex Media Server](https://junglewise.ai/threats/technologies/media-server): 4 vulnerabilities
2. Arista Velocloud Orchestrator: 1 vulnerability
3. Collabora Online – Built-In Code Server: 1 vulnerability
4. Collabora Online CODE Server (richdocumentscode): 1 vulnerability
5. EG Secure Solutions SiteGuard Server Edition: 1 vulnerability
6. Siemens Software Center: 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 19 to 25 October 2026 (week 43)", https://junglewise.ai/threats/exploited/2026-10-19, 27 October 2026.