Monthly report
Most vulnerable technologies in September 2026
Final report, published . It does not change.
In September 2026, Junglewise Threat Intelligence recorded 15,322 new vulnerabilities: 1,326 critical, 5,770 high and 28 exploited in the wild. The most vulnerable technology was Linux Kernel, with 2,099 vulnerabilities (119 critical), followed by Microsoft Windows (465) and Google Chrome (462).
- New vulnerabilities
- 15,322
- Critical
- 1,326
- Exploited in the wild
- 28
- Technologies affected
- 6,060
Ranking
Most affected vendors
- 1.Linux2,081 vulnerabilities, 119 critical, 0 exploited
- 2.Microsoft1,092 vulnerabilities, 88 critical, 4 exploited
- 3.Oracle592 vulnerabilities, 83 critical, 0 exploited
- 4.Google669 vulnerabilities, 83 critical, 3 exploited
- 5.IBM386 vulnerabilities, 42 critical, 0 exploited
- 6.Apple326 vulnerabilities, 21 critical, 1 exploited
- 7.Mozilla191 vulnerabilities, 41 critical, 0 exploited
- 8.Dell205 vulnerabilities, 11 critical, 0 exploited
- 9.Apache156 vulnerabilities, 29 critical, 0 exploited
- 10.Nvidia168 vulnerabilities, 1 critical, 0 exploited
Most severe vulnerabilities
- CVE-2026-85706: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1…criticalexploited in the wildCVSS 10EPSS 91.4%
- CVE-2026-76460: A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to…criticalexploited in the wildCVSS 10EPSS 14.0%
- CVE-2026-83548: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended…criticalexploited in the wildCVSS 10EPSS 8.8%
- CVE-2026-75650: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that…criticalexploited in the wildCVSS 10EPSS 4.0%
- CVE-2026-93952: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access…criticalexploited in the wildCVSS 10EPSS 0.9%
- CVE-2026-84869: A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session…criticalexploited in the wildCVSS 9.9EPSS 0.9%
- CVE-2026-76461: A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an…criticalexploited in the wildCVSS 9.8EPSS 28.3%
- CVE-2026-93616: A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary…criticalexploited in the wildCVSS 9.8EPSS 19.7%
- CVE-2026-86218: N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.criticalexploited in the wildCVSS 9.8EPSS 12.9%
- CVE-2026-19490: Citrix NetScaler authentication bypass via alternate pathcriticalexploited in the wildCVSS 9.8EPSS 7.0%
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
Technologies are ranked by a score: 10 points for each vulnerability exploited in the wild, 5 for each critical, 2 for each high and 1 for every vulnerability. A vulnerability counts once for every technology it affects, so one advisory can appear under several products.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/monthly/2026-09.json, and this page as text at https://junglewise.ai/threats/monthly/2026-09.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies in September 2026", https://junglewise.ai/threats/monthly/2026-09, 2 October 2026.