# Newly exploited vulnerabilities: week of 2 to 8 November 2026 (week 45)

Source: https://junglewise.ai/threats/exploited/2026-11-02  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 10 November 2026, 00:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-11-02.json  
License: CC BY 4.0 with a link back

In the week of 2 to 8 November 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Apple Ios (1), followed by Apple iPadOS (1) and Apple macOS (1).

## Newly exploited this week

- [CVE-2026-19868: SonicWall SonicOS SSLVPN SAML authentication bypass](https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn) (critical, exploited in the wild, exploited since 6 Nov 2026, published 6 Nov 2026)
- [CVE-2024-27834: Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass](https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability) (critical, exploited in the wild, exploited since 4 Nov 2026, published 4 Nov 2026)
- [CVE-2026-119977: WordPress Core remote code execution in upgrade path](https://junglewise.ai/threats/cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in) (critical, exploited in the wild, CVSS 8.1, exploited since 3 Nov 2026, published 31 Oct 2026)

## Technologies hit most

1. [Apple Ios](https://junglewise.ai/threats/technologies/apple-ios): 1 vulnerability
2. [Apple iPadOS](https://junglewise.ai/threats/technologies/ipados): 1 vulnerability
3. [Apple macOS](https://junglewise.ai/threats/technologies/macos): 1 vulnerability
4. [Apple Multiple Products](https://junglewise.ai/threats/technologies/multiple-products): 1 vulnerability
5. [Apple Safari](https://junglewise.ai/threats/technologies/safari): 1 vulnerability
6. [Apple tvOS](https://junglewise.ai/threats/technologies/tvos): 1 vulnerability
7. [Apple watchOS](https://junglewise.ai/threats/technologies/watchos): 1 vulnerability
8. Automattic WordPress: 1 vulnerability
9. [SonicWall SonicOS](https://junglewise.ai/threats/technologies/sonicos): 1 vulnerability
10. SonicWall Sonicos Sslvpn: 1 vulnerability
11. [Wordpress](https://junglewise.ai/threats/technologies/wordpress): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 2 to 8 November 2026 (week 45)", https://junglewise.ai/threats/exploited/2026-11-02, 10 November 2026.