{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 2 to 8 November 2026 (week 45)","summary":"In the week of 2 to 8 November 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Apple Ios (1), followed by Apple iPadOS (1) and Apple macOS (1).","url":"https://junglewise.ai/threats/exploited/2026-11-02","json_url":"https://junglewise.ai/threats/exploited/2026-11-02.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-11-02","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":3,"period":{"end":"2026-11-08","start":"2026-11-02"},"critical":3,"generated_at":"2026-11-10T00:07:00.200165+00:00","technologies":[{"hub":true,"name":"Apple Ios","slug":"apple-ios","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/apple-ios"},{"hub":true,"name":"Apple iPadOS","slug":"ipados","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/ipados"},{"hub":true,"name":"Apple macOS","slug":"macos","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/macos"},{"hub":true,"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"hub":true,"name":"Apple Safari","slug":"safari","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/safari"},{"hub":true,"name":"Apple tvOS","slug":"tvos","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/tvos"},{"hub":true,"name":"Apple watchOS","slug":"watchos","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/watchos"},{"hub":false,"name":"Automattic WordPress","slug":"automattic-wordpress","vulnerabilities":1},{"hub":true,"name":"SonicWall SonicOS","slug":"sonicos","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/sonicos"},{"hub":false,"name":"SonicWall Sonicos Sslvpn","slug":"sonicos-sslvpn","vulnerabilities":1},{"hub":true,"name":"Wordpress","slug":"wordpress","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/wordpress"}],"vulnerabilities":[{"cve":"CVE-2026-19868","slug":"cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn","title":"SonicWall SonicOS SSLVPN SAML authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-06T19:17:48.437+00:00","technologies":[{"hub":true,"name":"SonicWall SonicOS","slug":"sonicos","vendor":{"hub":true,"name":"SonicWall","slug":"sonicwall"}},{"hub":false,"name":"SonicWall Sonicos Sslvpn","slug":"sonicos-sslvpn","vendor":{"hub":true,"name":"SonicWall","slug":"sonicwall"}}],"exploited_since":"2026-11-06T21:11:03.253458+00:00","url":"https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn"},{"cve":"CVE-2024-27834","epss":0.006,"slug":"cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability","title":"Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-04T00:00:00+00:00","technologies":[{"hub":true,"name":"Apple Ios","slug":"apple-ios","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple iPadOS","slug":"ipados","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple macOS","slug":"macos","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple Multiple Products","slug":"multiple-products","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple Safari","slug":"safari","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple tvOS","slug":"tvos","vendor":{"hub":true,"name":"Apple","slug":"apple"}}],"exploited_since":"2026-11-04T20:26:03.753837+00:00","url":"https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability"},{"cve":"CVE-2026-119977","cvss":8.1,"epss":0.006,"slug":"cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in","title":"WordPress Core remote code execution in upgrade path","severity":"critical","exploited":true,"published_at":"2026-10-31T06:16:34.55+00:00","technologies":[{"hub":false,"name":"Automattic WordPress","slug":"automattic-wordpress","vendor":{"hub":true,"name":"Automattic","slug":"automattic"}},{"hub":true,"name":"Wordpress","slug":"wordpress","vendor":{"hub":true,"name":"Wordpress","slug":"wordpress"}}],"exploited_since":"2026-11-03T21:50:17.885017+00:00","url":"https://junglewise.ai/threats/cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in"}],"previous":{"key":"2026-10-26","top":"Amazon AWS","total":10,"period":{"end":"2026-11-01","start":"2026-10-26"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-10-26"},"next":null}