# Newly exploited vulnerabilities: week of 26 October to 1 November 2026 (week 44)

Source: https://junglewise.ai/threats/exploited/2026-10-26  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 3 November 2026, 00:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-10-26.json  
License: CC BY 4.0 with a link back

In the week of 26 October to 1 November 2026, 10 vulnerabilities were newly recorded as exploited in the wild, 10 of them critical. The technology hit most was Amazon AWS (3), followed by Google Cloud Platform (2) and Ivanti Connect Secure (2).

## Newly exploited this week

- [CVE-2026-118527: Ivanti Connect Secure predictable identifier generation](https://junglewise.ai/threats/cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or) (critical, exploited in the wild, exploited since 30 Oct 2026, published 30 Oct 2026)
- [CVE-2026-111357: Ivanti Connect Secure privilege escalation via DSCache configuration](https://junglewise.ai/threats/cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which) (critical, exploited in the wild, CVSS 7, exploited since 30 Oct 2026, published 15 Oct 2026)
- [CVE-2026-76418: Cisco Secure Firewall ASA and FTD SSL VPN denial of service](https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco) (critical, exploited in the wild, CVSS 8.6, exploited since 29 Oct 2026, published 28 Oct 2026)
- [CVE-2026-97229: GitLab CE/EE integer overflow in CI/CD regular expression compiler](https://junglewise.ai/threats/cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all) (critical, exploited in the wild, CVSS 10, exploited since 29 Oct 2026, published 13 Oct 2026)
- [CVE-2026-46300: Linux Kernel out-of-bounds write in skbuff coalescing](https://junglewise.ai/threats/cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing) (critical, exploited in the wild, CVSS 7.8, exploited since 28 Oct 2026, published 23 May 2026)
- [CVE-2026-41709: VMware ESX insufficient logging vulnerability](https://junglewise.ai/threats/cve-2026-41709-vmware-esx-insufficient-logging-vulnerability) (critical, exploited in the wild, CVSS 2.7, exploited since 28 Oct 2026, published 30 Jul 2026)
- [CVE-2026-111497: Google Brotli buffer overflow in decoder](https://junglewise.ai/threats/cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec) (critical, exploited in the wild, CVSS 4, exploited since 27 Oct 2026, published 22 Oct 2026)
- [CVE-2026-48356: Adobe Commerce unrestricted file upload in multiple components](https://junglewise.ai/threats/cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components) (critical, exploited in the wild, CVSS 9.6, exploited since 27 Oct 2026, published 14 Jul 2026)
- [CVE-2026-109619: PHP use-after-free in global state handling](https://junglewise.ai/threats/cve-2026-109619-php-has-various-global-state-that-temporarily-points-into) (critical, exploited in the wild, exploited since 26 Oct 2026, published 21 Oct 2026)
- [CVE-2026-109618: PHP Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070) (critical, exploited in the wild, exploited since 26 Oct 2026, published 21 Oct 2026)

## Technologies hit most

1. [Amazon AWS](https://junglewise.ai/threats/technologies/aws): 3 vulnerabilities
2. [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 2 vulnerabilities
3. [Ivanti Connect Secure](https://junglewise.ai/threats/technologies/connect-secure): 2 vulnerabilities
4. [PHP Group PHP](https://junglewise.ai/threats/technologies/php): 2 vulnerabilities
5. [Adobe Commerce](https://junglewise.ai/threats/technologies/commerce): 1 vulnerability
6. [Adobe Commerce B2B](https://junglewise.ai/threats/technologies/commerce-b2b): 1 vulnerability
7. [Adobe Commerce Webhooks Plugin](https://junglewise.ai/threats/technologies/commerce-webhooks-plugin): 1 vulnerability
8. [Adobe Magento](https://junglewise.ai/threats/technologies/magento): 1 vulnerability
9. [Adobe Magento Enterprise Edition](https://junglewise.ai/threats/technologies/magento-enterprise-edition): 1 vulnerability
10. [Adobe Magento Open Source](https://junglewise.ai/threats/technologies/magento-open-source): 1 vulnerability
11. Broadcom Vmware Esx: 1 vulnerability
12. [brotli (PyPI)](https://junglewise.ai/threats/technologies/pypi-brotli): 1 vulnerability
13. brotlicffi (PyPI): 1 vulnerability
14. [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 1 vulnerability
15. [Cisco Secure Firewall Adaptive Security Appliance (ASA) Software](https://junglewise.ai/threats/technologies/secure-firewall-adaptive-security-appliance-asa-software): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 26 October to 1 November 2026 (week 44)", https://junglewise.ai/threats/exploited/2026-10-26, 3 November 2026.