# Most vulnerable technologies in June 2026

Source: https://junglewise.ai/threats/monthly/2026-06  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 26 September 2026, 09:24 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/monthly/2026-06.json  
License: CC BY 4.0 with a link back

In June 2026, Junglewise Threat Intelligence recorded 8,427 new vulnerabilities: 706 critical, 2,357 high and 29 exploited in the wild. The most vulnerable technology was Google Chrome, with 947 vulnerabilities (2 critical, 1 exploited in the wild), followed by Linux Kernel (397) and Openclaw (128).

## Ranking

| # | Technology | Vulns | Critical | High | Exploited | Max CVSS |
| --- | --- | --- | --- | --- | --- | --- |
| 1 | [Google Chrome](https://junglewise.ai/threats/technologies/chrome) (Google) | 947 | 2 | 18 | 1 | 10 |
| 2 | [Linux Kernel](https://junglewise.ai/threats/technologies/kernel) (Linux) | 397 | 2 | 1 | 2 | 8.2 |
| 3 | [Openclaw](https://junglewise.ai/threats/technologies/openclaw) (Openclaw) | 128 | 2 | 50 | 0 | 9.8 |
| 4 | [Pip Picklescan](https://junglewise.ai/threats/technologies/picklescan) (Pip) | 53 | 16 | 34 | 0 | 10 |
| 5 | [Microsoft Windows](https://junglewise.ai/threats/technologies/windows-) (Microsoft) | 56 | 4 | 42 | 0 | 9.8 |
| 6 | [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content) (Oracle) | 29 | 15 | 13 | 0 | 9.9 |
| 7 | [Capgo](https://junglewise.ai/threats/technologies/capgo) (Capgo) | 59 | 1 | 29 | 0 | 9.1 |
| 8 | [Npm Flowise](https://junglewise.ai/threats/technologies/flowise) (Npm) | 38 | 9 | 19 | 0 | 10 |
| 9 | [N8n](https://junglewise.ai/threats/technologies/n8n) (N8n) | 32 | 8 | 13 | 0 | 10 |
| 10 | [Adobe ColdFusion](https://junglewise.ai/threats/technologies/coldfusion) (Adobe) | 17 | 8 | 7 | 1 | 10 |
| 11 | [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools) (Oracle) | 14 | 13 | 1 | 0 | 9.8 |
| 12 | [IBM Langflow](https://junglewise.ai/threats/technologies/langflow-oss) (IBM) | 14 | 9 | 5 | 0 | 10 |
| 13 | [Oracle Enterprise Manager Base Platform](https://junglewise.ai/threats/technologies/enterprise-manager-base-platform) (Oracle) | 14 | 9 | 5 | 0 | 9.9 |
| 14 | [Google Android](https://junglewise.ai/threats/technologies/android) (Google) | 60 | 0 | 4 | 0 | 10 |
| 15 | [Oracle WebLogic Server](https://junglewise.ai/threats/technologies/weblogic-server) (Oracle) | 14 | 6 | 7 | 1 | 10 |
| 16 | [Gogs](https://junglewise.ai/threats/technologies/gogs) (Gogs) | 25 | 3 | 13 | 0 | 10 |
| 17 | [Gogs.io/Gogs](https://junglewise.ai/threats/technologies/gogs-io-gogs) (Go) | 24 | 3 | 13 | 0 | 10 |
| 18 | [Fission](https://junglewise.ai/threats/technologies/fission) (Fission) | 18 | 5 | 9 | 0 | 9.9 |
| 19 | [Go Github.com/Fission/Fission](https://junglewise.ai/threats/technologies/github-com-fission-fission) (Go) | 18 | 5 | 9 | 0 | 9.9 |
| 20 | [Oracle WebCenter Enterprise Capture](https://junglewise.ai/threats/technologies/webcenter-enterprise-capture) (Oracle) | 10 | 10 | 0 | 0 | 10 |
| 21 | [Oracle WebCenter Portal](https://junglewise.ai/threats/technologies/webcenter-portal) (Oracle) | 10 | 10 | 0 | 0 | 10 |
| 22 | [Adobe Acrobat Reader](https://junglewise.ai/threats/technologies/acrobat-reader) (Adobe) | 24 | 0 | 17 | 0 | 7.8 |
| 23 | [IBM WebSphere Application Server](https://junglewise.ai/threats/technologies/websphere-application-server) (IBM) | 17 | 5 | 8 | 0 | 9.3 |
| 24 | [Oracle WebCenter Sites](https://junglewise.ai/threats/technologies/webcenter-sites) (Oracle) | 11 | 8 | 3 | 0 | 10 |
| 25 | [Pip Crawl4ai](https://junglewise.ai/threats/technologies/crawl4ai) (Pip) | 15 | 5 | 8 | 0 | 10 |

## Most affected vendors

1. [Google](https://junglewise.ai/threats/vendors/google): 1,091 vulnerabilities, 8 critical, 2 exploited
2. [Oracle](https://junglewise.ai/threats/vendors/oracle): 230 vulnerabilities, 121 critical, 2 exploited
3. [Npm](https://junglewise.ai/threats/vendors/npm): 263 vulnerabilities, 34 critical, 0 exploited
4. [Pip](https://junglewise.ai/threats/vendors/pypi): 235 vulnerabilities, 37 critical, 0 exploited
5. [Microsoft](https://junglewise.ai/threats/vendors/microsoft): 220 vulnerabilities, 16 critical, 2 exploited
6. [Go](https://junglewise.ai/threats/vendors/go): 204 vulnerabilities, 32 critical, 0 exploited
7. [Linux](https://junglewise.ai/threats/vendors/linux): 398 vulnerabilities, 2 critical, 2 exploited
8. [Adobe](https://junglewise.ai/threats/vendors/adobe): 86 vulnerabilities, 12 critical, 1 exploited
9. [Openclaw](https://junglewise.ai/threats/vendors/openclaw): 129 vulnerabilities, 2 critical, 0 exploited
10. [ThemeREX](https://junglewise.ai/threats/vendors/themerex): 61 vulnerabilities, 6 critical, 0 exploited

## Most severe vulnerabilities

- [CVE-2026-10520: Ivanti Sentry OS command injection allows remote code execution](https://junglewise.ai/threats/cve-2026-10520-ivanti-sentry-os-command-injection-allows-remote-code-execution) (critical, exploited in the wild, CVSS 10, published 9 Jun 2026)
- [CVE-2026-49869: Kestra OSS authentication bypass in AuthenticationFilter](https://junglewise.ai/threats/cve-2026-49869-kestra-oss-authentication-bypass-in-authenticationfilter) (critical, exploited in the wild, CVSS 10, published 26 Jun 2026)
- [CVE-2026-48282: Adobe ColdFusion path traversal in multiple versions](https://junglewise.ai/threats/cve-2026-48282-adobe-coldfusion-path-traversal-in-multiple-versions) (critical, exploited in the wild, CVSS 10, published 30 Jun 2026)
- [CVE-2026-48907: Joomla JCE Editor improper access control leading to RCE](https://junglewise.ai/threats/cve-2026-48907-joomla-jce-editor-improper-access-control-leading-to-rce) (critical, exploited in the wild, CVSS 10, published 5 Jun 2026)
- [CVE-2026-48908: JoomShaper SP Page Builder arbitrary file upload in Joomla](https://junglewise.ai/threats/cve-2026-48908-joomshaper-sp-page-builder-arbitrary-file-upload-in-joomla) (critical, exploited in the wild, CVSS 10, published 20 Jun 2026)
- [CVE-2026-48558: SimpleHelp authentication bypass in OIDC authentication flow](https://junglewise.ai/threats/cve-2026-48558-simplehelp-authentication-bypass-in-oidc-authentication-flow) (critical, exploited in the wild, CVSS 10, published 12 Jun 2026)
- [CVE-2026-48939: Joomla iCagenda arbitrary file upload in file attachment feature](https://junglewise.ai/threats/cve-2026-48939-joomla-icagenda-arbitrary-file-upload-in-file-attachment-feature) (critical, exploited in the wild, CVSS 10, published 20 Jun 2026)
- [CVE-2026-56290: Joomlack Page Builder CK unauthenticated arbitrary file upload](https://junglewise.ai/threats/cve-2026-56290-joomlack-page-builder-ck-unauthenticated-arbitrary-file-upload) (critical, exploited in the wild, CVSS 10, published 29 Jun 2026)
- [CVE-2026-55255: Langflow IDOR in responses endpoint allows cross-user flow execution](https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow) (critical, exploited in the wild, CVSS 9.9, published 23 Jun 2026)
- [CVE-2026-25089: Fortinet FortiSandbox OS command injection in Web UI](https://junglewise.ai/threats/cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui) (critical, exploited in the wild, CVSS 9.8, published 9 Jun 2026)

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies in June 2026", https://junglewise.ai/threats/monthly/2026-06, 26 September 2026.