{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 26 October to 1 November 2026 (week 44)","summary":"In the week of 26 October to 1 November 2026, 10 vulnerabilities were newly recorded as exploited in the wild, 10 of them critical. The technology hit most was Amazon AWS (3), followed by Google Cloud Platform (2) and Ivanti Connect Secure (2).","url":"https://junglewise.ai/threats/exploited/2026-10-26","json_url":"https://junglewise.ai/threats/exploited/2026-10-26.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-10-26","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":10,"period":{"end":"2026-11-01","start":"2026-10-26"},"critical":10,"generated_at":"2026-11-03T00:07:00.176566+00:00","technologies":[{"hub":true,"name":"Amazon AWS","slug":"aws","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/aws"},{"hub":true,"name":"Google Cloud Platform","slug":"google-cloud-platform","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/google-cloud-platform"},{"hub":true,"name":"Ivanti Connect Secure","slug":"connect-secure","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/connect-secure"},{"hub":true,"name":"PHP Group PHP","slug":"php","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/php"},{"hub":true,"name":"Adobe Commerce","slug":"commerce","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/commerce"},{"hub":true,"name":"Adobe Commerce B2B","slug":"commerce-b2b","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/commerce-b2b"},{"hub":true,"name":"Adobe Commerce Webhooks Plugin","slug":"commerce-webhooks-plugin","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/commerce-webhooks-plugin"},{"hub":true,"name":"Adobe Magento","slug":"magento","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/magento"},{"hub":true,"name":"Adobe Magento Enterprise Edition","slug":"magento-enterprise-edition","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/magento-enterprise-edition"},{"hub":true,"name":"Adobe Magento Open Source","slug":"magento-open-source","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/magento-open-source"},{"hub":false,"name":"Broadcom Vmware Esx","slug":"vmware-esx","vulnerabilities":1},{"hub":true,"name":"brotli (PyPI)","slug":"pypi-brotli","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/pypi-brotli"},{"hub":false,"name":"brotlicffi (PyPI)","slug":"pypi-brotlicffi","vulnerabilities":1},{"hub":true,"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-asa-software"},{"hub":true,"name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","slug":"secure-firewall-adaptive-security-appliance-asa-software","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/secure-firewall-adaptive-security-appliance-asa-software"}],"vulnerabilities":[{"cve":"CVE-2026-118527","slug":"cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or","title":"Ivanti Connect Secure predictable identifier generation","severity":"critical","exploited":true,"published_at":"2026-10-30T00:00:00+00:00","technologies":[{"hub":true,"name":"Ivanti Connect Secure","slug":"connect-secure","vendor":{"hub":true,"name":"Ivanti","slug":"ivanti"}}],"exploited_since":"2026-10-30T18:16:06.796877+00:00","url":"https://junglewise.ai/threats/cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or"},{"cve":"CVE-2026-111357","cvss":7,"epss":0.0032,"slug":"cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which","title":"Ivanti Connect Secure privilege escalation via DSCache configuration","severity":"critical","exploited":true,"published_at":"2026-10-15T21:17:13.19+00:00","technologies":[{"hub":true,"name":"Ivanti Connect Secure","slug":"connect-secure","vendor":{"hub":true,"name":"Ivanti","slug":"ivanti"}}],"exploited_since":"2026-10-30T18:16:04.487685+00:00","url":"https://junglewise.ai/threats/cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which"},{"cve":"CVE-2026-76418","cvss":8.6,"epss":0.0057,"slug":"cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco","title":"Cisco Secure Firewall ASA and FTD SSL VPN denial of service","severity":"critical","exploited":true,"published_at":"2026-10-28T20:18:47.063+00:00","technologies":[{"hub":false,"name":"Cisco Secure Ftd Software","slug":"cisco-secure-ftd-software","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","slug":"secure-firewall-adaptive-security-appliance-asa-software","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Secure Firewall Threat Defense (FTD) Software","slug":"secure-firewall-threat-defense-ftd-software","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-10-29T20:56:02.712602+00:00","url":"https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco"},{"cve":"CVE-2026-97229","cvss":10,"epss":0.1843,"slug":"cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all","title":"GitLab CE/EE integer overflow in CI/CD regular expression compiler","severity":"critical","exploited":true,"published_at":"2026-10-13T02:17:00.84+00:00","technologies":[{"hub":true,"name":"GitLab Community Edition","slug":"gitlab-ce","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Enterprise Edition","slug":"gitlab-ee","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab","slug":"gitlab","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Community Edition","slug":"gitlab-ce","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Enterprise Edition","slug":"gitlab-ee","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}}],"exploited_since":"2026-10-29T20:56:02.670046+00:00","url":"https://junglewise.ai/threats/cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all"},{"cve":"CVE-2026-46300","cvss":7.8,"epss":0.1019,"slug":"cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing","title":"Linux Kernel out-of-bounds write in skbuff coalescing","severity":"critical","exploited":true,"published_at":"2026-05-23T12:17:02.66+00:00","technologies":[{"hub":true,"name":"Amazon AWS","slug":"aws","vendor":{"hub":true,"name":"Amazon","slug":"amazon"}},{"hub":true,"name":"Google Cloud Platform","slug":"google-cloud-platform","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"hub":true,"name":"Linux","slug":"linux"}},{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"hub":true,"name":"Linux","slug":"linux"}}],"exploited_since":"2026-10-28T20:36:03.885024+00:00","url":"https://junglewise.ai/threats/cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing"},{"cve":"CVE-2026-41709","cvss":2.7,"epss":0.003,"slug":"cve-2026-41709-vmware-esx-insufficient-logging-vulnerability","title":"VMware ESX insufficient logging vulnerability","severity":"critical","exploited":true,"published_at":"2026-07-30T14:16:57.42+00:00","technologies":[{"hub":true,"name":"VMware Cloud Foundation","slug":"cloud-foundation","vendor":{"hub":true,"name":"VMware","slug":"vmware"}},{"hub":false,"name":"VMware ESX","slug":"esx","vendor":{"hub":true,"name":"VMware","slug":"vmware"}},{"hub":true,"name":"VMware ESXi","slug":"esxi","vendor":{"hub":true,"name":"VMware","slug":"vmware"}},{"hub":false,"name":"Broadcom Vmware Esx","slug":"vmware-esx","vendor":{"hub":true,"name":"Broadcom","slug":"broadcom"}},{"hub":true,"name":"VMware vSphere Foundation","slug":"vsphere-foundation","vendor":{"hub":true,"name":"VMware","slug":"vmware"}}],"exploited_since":"2026-10-28T20:36:03.864826+00:00","url":"https://junglewise.ai/threats/cve-2026-41709-vmware-esx-insufficient-logging-vulnerability"},{"cve":"CVE-2026-111497","cvss":4,"epss":0.5548,"slug":"cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec","title":"Google Brotli buffer overflow in decoder","severity":"critical","exploited":true,"published_at":"2026-10-22T14:17:37.19+00:00","technologies":[{"hub":true,"name":"Amazon AWS","slug":"aws","vendor":{"hub":true,"name":"Amazon","slug":"amazon"}},{"hub":true,"name":"Google Brotli","slug":"brotli","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":false,"name":"Node.js","slug":"node-js-node-js","vendor":{"hub":false,"name":"Node.js","slug":"node-js"}},{"hub":true,"name":"brotli (PyPI)","slug":"pypi-brotli","vendor":{"hub":true,"name":"PyPI","slug":"pypi"}},{"hub":false,"name":"brotlicffi (PyPI)","slug":"pypi-brotlicffi","vendor":{"hub":true,"name":"PyPI","slug":"pypi"}}],"exploited_since":"2026-10-27T20:21:03.02653+00:00","url":"https://junglewise.ai/threats/cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec"},{"cve":"CVE-2026-48356","cvss":9.6,"epss":0.3058,"slug":"cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components","title":"Adobe Commerce unrestricted file upload in multiple components","severity":"critical","exploited":true,"published_at":"2026-07-14T20:17:08.437+00:00","technologies":[{"hub":true,"name":"Adobe Commerce","slug":"commerce","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Commerce B2B","slug":"commerce-b2b","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Commerce Webhooks Plugin","slug":"commerce-webhooks-plugin","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento","slug":"magento","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento Enterprise Edition","slug":"magento-enterprise-edition","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento Open Source","slug":"magento-open-source","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}}],"exploited_since":"2026-10-27T20:21:02.977172+00:00","url":"https://junglewise.ai/threats/cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components"},{"cve":"CVE-2026-109619","epss":1,"slug":"cve-2026-109619-php-has-various-global-state-that-temporarily-points-into","title":"PHP use-after-free in global state handling","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.823+00:00","technologies":[{"hub":true,"name":"PHP Group PHP","slug":"php","vendor":{"hub":true,"name":"PHP Group","slug":"php-group"}}],"exploited_since":"2026-10-26T23:41:03.70627+00:00","url":"https://junglewise.ai/threats/cve-2026-109619-php-has-various-global-state-that-temporarily-points-into"},{"cve":"CVE-2026-109618","epss":0.9998,"slug":"cve-2026-109618-gcp-2026-070","title":"PHP Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.357+00:00","technologies":[{"hub":true,"name":"Amazon AWS","slug":"aws","vendor":{"hub":true,"name":"Amazon","slug":"amazon"}},{"hub":true,"name":"Google Cloud Platform","slug":"google-cloud-platform","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":true,"name":"PHP Group PHP","slug":"php","vendor":{"hub":true,"name":"PHP Group","slug":"php-group"}}],"exploited_since":"2026-10-26T23:41:03.585412+00:00","url":"https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070"}],"previous":{"key":"2026-10-19","top":"Plex Media Server","total":8,"period":{"end":"2026-10-25","start":"2026-10-19"},"critical":8,"url":"https://junglewise.ai/threats/exploited/2026-10-19"},"next":{"key":"2026-11-02","top":"Apple Ios","total":3,"period":{"end":"2026-11-08","start":"2026-11-02"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-11-02"}}