# Most vulnerable technologies in July 2026

Source: https://junglewise.ai/threats/monthly/2026-07  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 26 September 2026, 09:11 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/monthly/2026-07.json  
License: CC BY 4.0 with a link back

In July 2026, Junglewise Threat Intelligence recorded 10,520 new vulnerabilities: 782 critical, 3,223 high and 23 exploited in the wild. The most vulnerable technology was Microsoft Windows 11, with 367 vulnerabilities (8 critical), followed by Microsoft Windows 10 (318) and Linux Kernel (632).

## Ranking

| # | Technology | Vulns | Critical | High | Exploited | Max CVSS |
| --- | --- | --- | --- | --- | --- | --- |
| 1 | [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11) (Microsoft) | 367 | 8 | 265 | 0 | 9.9 |
| 2 | [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10) (Microsoft) | 318 | 10 | 218 | 1 | 9.9 |
| 3 | [Linux Kernel](https://junglewise.ai/threats/technologies/kernel) (Linux) | 632 | 1 | 1 | 1 | 8.8 |
| 4 | [Google Chrome](https://junglewise.ai/threats/technologies/chrome) (Google) | 455 | 1 | 8 | 0 | 10 |
| 5 | [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence) (Oracle) | 98 | 62 | 21 | 0 | 10 |
| 6 | [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012) (Microsoft) | 163 | 9 | 109 | 1 | 9.9 |
| 7 | [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2) (Microsoft) | 152 | 3 | 110 | 0 | 9.8 |
| 8 | [Microsoft Windows 11 Version 26H1](https://junglewise.ai/threats/technologies/windows-11-version-26h1) (Microsoft) | 128 | 2 | 99 | 0 | 9.8 |
| 9 | [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2) (Microsoft) | 124 | 2 | 95 | 0 | 9.8 |
| 10 | [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025) (Microsoft) | 83 | 1 | 67 | 0 | 9.8 |
| 11 | [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019) (Microsoft) | 80 | 3 | 57 | 1 | 9.8 |
| 12 | [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2) (Microsoft) | 86 | 2 | 52 | 0 | 9.8 |
| 13 | [Microsoft Windows 10 22h2](https://junglewise.ai/threats/technologies/windows-10-22h2) (Microsoft) | 86 | 2 | 52 | 0 | 9.8 |
| 14 | [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016) (Microsoft) | 73 | 3 | 50 | 1 | 9.8 |
| 15 | [Gitea](https://junglewise.ai/threats/technologies/gitea) (Gitea) | 83 | 10 | 31 | 0 | 9.8 |
| 16 | [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022) (Microsoft) | 80 | 0 | 57 | 0 | 8.8 |
| 17 | [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809) (Microsoft) | 74 | 4 | 48 | 0 | 9.8 |
| 18 | [Go Code.gitea.io/Gitea](https://junglewise.ai/threats/technologies/code-gitea-io-gitea) (Go) | 74 | 11 | 29 | 0 | 9.8 |
| 19 | [Microsoft 365 Apps for Enterprise](https://junglewise.ai/threats/technologies/365-apps-for-enterprise) (Microsoft) | 70 | 0 | 48 | 0 | 8.4 |
| 20 | [Openclaw](https://junglewise.ai/threats/technologies/openclaw) (Openclaw) | 69 | 1 | 46 | 0 | 9.3 |
| 21 | [Microsoft Office LTSC 2021](https://junglewise.ai/threats/technologies/office-ltsc-2021) (Microsoft) | 68 | 0 | 47 | 0 | 8.4 |
| 22 | [Microsoft Office LTSC 2024](https://junglewise.ai/threats/technologies/office-ltsc-2024) (Microsoft) | 68 | 0 | 47 | 0 | 8.4 |
| 23 | [Apple macOS](https://junglewise.ai/threats/technologies/macos-tahoe) (Apple) | 159 | 0 | 0 | 0 | 5.5 |
| 24 | [Microsoft Office 2019](https://junglewise.ai/threats/technologies/office-2019) (Microsoft) | 67 | 0 | 46 | 0 | 8.4 |
| 25 | [Microsoft Windows 10 1607](https://junglewise.ai/threats/technologies/windows-10-1607) (Microsoft) | 59 | 4 | 38 | 0 | 9.8 |

## Most affected vendors

1. [Oracle](https://junglewise.ai/threats/vendors/oracle): 1,044 vulnerabilities, 200 critical, 0 exploited
2. [Microsoft](https://junglewise.ai/threats/vendors/microsoft): 667 vulnerabilities, 39 critical, 5 exploited
3. [Linux](https://junglewise.ai/threats/vendors/linux): 632 vulnerabilities, 1 critical, 1 exploited
4. [Npm](https://junglewise.ai/threats/vendors/npm): 270 vulnerabilities, 29 critical, 0 exploited
5. [Google](https://junglewise.ai/threats/vendors/google): 507 vulnerabilities, 2 critical, 0 exploited
6. [Go](https://junglewise.ai/threats/vendors/go): 232 vulnerabilities, 23 critical, 0 exploited
7. [Pip](https://junglewise.ai/threats/vendors/pypi): 202 vulnerabilities, 19 critical, 0 exploited
8. [Composer](https://junglewise.ai/threats/vendors/packagist): 160 vulnerabilities, 14 critical, 0 exploited
9. [IBM](https://junglewise.ai/threats/vendors/ibm): 105 vulnerabilities, 25 critical, 1 exploited
10. [Adobe](https://junglewise.ai/threats/vendors/adobe): 107 vulnerabilities, 15 critical, 0 exploited

## Most severe vulnerabilities

- [CVE-2026-56291: Balbooa Forms for Joomla unauthenticated file upload RCE](https://junglewise.ai/threats/cve-2026-56291-balbooa-forms-for-joomla-unauthenticated-file-upload-rce) (critical, exploited in the wild, CVSS 10, published 9 Jul 2026)
- [CVE-2026-16812: Arista VeloCloud Orchestrator OS command injection in on-prem host](https://junglewise.ai/threats/cve-2026-16812-arista-velocloud-orchestrator-os-command-injection-in-on-prem) (critical, exploited in the wild, CVSS 10, published 27 Jul 2026)
- [CVE-2026-50522: Microsoft SharePoint remote code execution via unsafe deserialization](https://junglewise.ai/threats/cve-2026-50522-microsoft-sharepoint-remote-code-execution-via-unsafe) (critical, exploited in the wild, CVSS 9.8, published 14 Jul 2026)
- [CVE-2026-59310: VMware vCenter directory traversal in Syslog server](https://junglewise.ai/threats/cve-2026-59310-vmware-vcenter-directory-traversal-in-syslog-server) (critical, exploited in the wild, CVSS 9.8, published 30 Jul 2026)
- [CVE-2026-9198: IBM Langflow OSS remote code execution via auto-login bypass](https://junglewise.ai/threats/cve-2026-9198-ibm-langflow-oss-remote-code-execution-via-auto-login-bypass) (critical, exploited in the wild, CVSS 9.8, published 17 Jul 2026)
- [CVE-2026-58644: Microsoft SharePoint remote code execution via untrusted deserialization](https://junglewise.ai/threats/cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted) (critical, exploited in the wild, CVSS 9.8, published 14 Jul 2026)
- [CVE-2026-63077: JetBrains TeamCity remote code execution in agent polling protocol](https://junglewise.ai/threats/cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling) (critical, exploited in the wild, CVSS 9.8, published 27 Jul 2026)
- [CVE-2026-16232: Check Point SmartConsole authentication bypass in login process](https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process) (critical, exploited in the wild, CVSS 9.8, published 22 Jul 2026)
- [CVE-2026-9586: Sangoma Switchvox SMB SQL injection in /pa endpoint](https://junglewise.ai/threats/cve-2026-9586-sangoma-switchvox-smb-sql-injection-in-pa-endpoint) (critical, exploited in the wild, CVSS 9.3, published 17 Jul 2026)
- [CVE-2008-4128: Cisco IOS CSRF in HTTP Administration component](https://junglewise.ai/threats/cve-2008-4128-cisco-ios-csrf-in-http-administration-component) (critical, exploited in the wild, CVSS 9.3, published 13 Jul 2026)

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies in July 2026", https://junglewise.ai/threats/monthly/2026-07, 26 September 2026.