{"schema_version":1,"title":"Most vulnerable technologies in September 2026","summary":"In September 2026, Junglewise Threat Intelligence recorded 15,322 new vulnerabilities: 1,326 critical, 5,770 high and 28 exploited in the wild. The most vulnerable technology was Linux Kernel, with 2,099 vulnerabilities (119 critical), followed by Microsoft Windows (465) and Google Chrome (462).","url":"https://junglewise.ai/threats/monthly/2026-09","json_url":"https://junglewise.ai/threats/monthly/2026-09.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/monthly/2026-09","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"Technologies are ranked by 10 points per vulnerability exploited in the wild, 5 per critical, 2 per high and 1 per vulnerability, over vulnerabilities published in the period (UTC). A vulnerability counts for every technology it affects.","kind":"month","period":{"end":"2026-09-30","start":"2026-09-01"},"totals":{"high":5770,"tracked":60884,"critical":1326,"exploited":28,"technologies":6060,"vulnerabilities":15322},"notable":[{"cve":"CVE-2026-85706","cvss":10,"epss":0.9143,"slug":"cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.","severity":"critical","exploited":true,"published_at":"2026-09-12T03:16:30.473+00:00","url":"https://junglewise.ai/threats/cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits"},{"cve":"CVE-2026-76460","cvss":10,"epss":0.1403,"slug":"cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use","title":"A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.","severity":"critical","exploited":true,"published_at":"2026-09-16T21:17:21.43+00:00","url":"https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use"},{"cve":"CVE-2026-83548","cvss":10,"epss":0.0876,"slug":"cve-2026-83548-sonicwall-sma1000-server-side-request-forgery","title":"A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A r","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.17+00:00","url":"https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery"},{"cve":"CVE-2026-75650","cvss":10,"epss":0.0395,"slug":"cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template","title":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in ar","severity":"critical","exploited":true,"published_at":"2026-09-07T21:17:30.863+00:00","url":"https://junglewise.ai/threats/cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template"},{"cve":"CVE-2026-93952","cvss":10,"epss":0.009,"slug":"cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation","title":"VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functio","severity":"critical","exploited":true,"published_at":"2026-09-22T08:16:43.047+00:00","url":"https://junglewise.ai/threats/cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation"},{"cve":"CVE-2026-84869","cvss":9.9,"epss":0.0092,"slug":"cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and","title":"A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorizatio","severity":"critical","exploited":true,"published_at":"2026-09-08T20:18:51.147+00:00","url":"https://junglewise.ai/threats/cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and"},{"cve":"CVE-2026-76461","cvss":9.8,"epss":0.2827,"slug":"cve-2026-76461-cisco-secure-email-gateway-sql-injection","title":"A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacke","severity":"critical","exploited":true,"published_at":"2026-09-14T17:17:51.113+00:00","url":"https://junglewise.ai/threats/cve-2026-76461-cisco-secure-email-gateway-sql-injection"},{"cve":"CVE-2026-93616","cvss":9.8,"epss":0.1965,"slug":"cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability","title":"A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Poin","severity":"critical","exploited":true,"published_at":"2026-09-22T13:17:11.963+00:00","url":"https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability"},{"cve":"CVE-2026-86218","cvss":9.8,"epss":0.1293,"slug":"cve-2026-86218-n-able-n-central-static-code-injection-vulnerability","title":"N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.","severity":"critical","exploited":true,"published_at":"2026-09-06T03:17:17.373+00:00","url":"https://junglewise.ai/threats/cve-2026-86218-n-able-n-central-static-code-injection-vulnerability"},{"cve":"CVE-2026-19490","cvss":9.8,"epss":0.0701,"slug":"cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path","title":"Citrix NetScaler authentication bypass via alternate path","severity":"critical","exploited":true,"published_at":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path"}],"vendors":[{"hub":true,"high":622,"name":"Linux","rank":1,"slug":"linux","critical":119,"exploited":0,"vulnerabilities":2081,"url":"https://junglewise.ai/threats/vendors/linux"},{"hub":true,"high":728,"name":"Microsoft","rank":2,"slug":"microsoft","critical":88,"exploited":4,"vulnerabilities":1092,"url":"https://junglewise.ai/threats/vendors/microsoft"},{"hub":true,"high":463,"name":"Oracle","rank":3,"slug":"oracle","critical":83,"exploited":0,"vulnerabilities":592,"url":"https://junglewise.ai/threats/vendors/oracle"},{"hub":true,"high":242,"name":"Google","rank":4,"slug":"google","critical":83,"exploited":3,"vulnerabilities":669,"url":"https://junglewise.ai/threats/vendors/google"},{"hub":true,"high":182,"name":"IBM","rank":5,"slug":"ibm","critical":42,"exploited":0,"vulnerabilities":386,"url":"https://junglewise.ai/threats/vendors/ibm"},{"hub":true,"high":109,"name":"Apple","rank":6,"slug":"apple","critical":21,"exploited":1,"vulnerabilities":326,"url":"https://junglewise.ai/threats/vendors/apple"},{"hub":true,"high":90,"name":"Mozilla","rank":7,"slug":"mozilla","critical":41,"exploited":0,"vulnerabilities":191,"url":"https://junglewise.ai/threats/vendors/mozilla"},{"hub":true,"high":82,"name":"Dell","rank":8,"slug":"dell","critical":11,"exploited":0,"vulnerabilities":205,"url":"https://junglewise.ai/threats/vendors/dell"},{"hub":true,"high":58,"name":"Apache","rank":9,"slug":"apache","critical":29,"exploited":0,"vulnerabilities":156,"url":"https://junglewise.ai/threats/vendors/apache"},{"hub":true,"high":121,"name":"Nvidia","rank":10,"slug":"nvidia","critical":1,"exploited":0,"vulnerabilities":168,"url":"https://junglewise.ai/threats/vendors/nvidia"}],"generated_at":"2026-10-02T00:07:00.223928+00:00","technologies":[{"hub":true,"top":[{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-84412","cvss":10,"epss":0.0125,"slug":"cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.923+00:00","url":"https://junglewise.ai/threats/cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75723","cvss":10,"epss":0.0117,"slug":"cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.163+00:00","url":"https://junglewise.ai/threats/cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect"}],"high":623,"name":"Linux Kernel","rank":1,"slug":"kernel","score":3940,"vendor":{"name":"Linux","slug":"linux"},"critical":119,"max_cvss":10,"max_epss":0.0125,"exploited":0,"vulnerabilities":2099,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"top":[{"cve":"CVE-2026-85880","cvss":7.8,"epss":0.0362,"slug":"cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local","title":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","severity":"critical","exploited":true,"published_at":"2026-09-08T18:21:14.087+00:00","url":"https://junglewise.ai/threats/cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local"},{"cve":"CVE-2026-81963","cvss":7.8,"epss":0.0039,"slug":"cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in","title":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges l","severity":"critical","exploited":true,"published_at":"2026-09-08T18:21:00.09+00:00","url":"https://junglewise.ai/threats/cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in"},{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"}],"high":324,"name":"Microsoft Windows","rank":2,"slug":"windows-","score":1328,"vendor":{"name":"Microsoft","slug":"microsoft"},"critical":39,"max_cvss":10,"max_epss":0.0362,"exploited":2,"vulnerabilities":465,"url":"https://junglewise.ai/threats/technologies/windows-"},{"hub":true,"top":[{"cve":"CVE-2026-87491","cvss":8.8,"epss":0.0314,"slug":"cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine","title":"Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via","severity":"critical","exploited":true,"published_at":"2026-09-09T01:17:05.887+00:00","url":"https://junglewise.ai/threats/cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine"},{"cve":"CVE-2026-85046","cvss":8.8,"epss":0.4888,"slug":"cve-2026-85046-google-chromium-v8-type-confusion-vulnerability","title":"Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr","severity":"critical","exploited":true,"published_at":"2026-09-03T20:17:24.21+00:00","url":"https://junglewise.ai/threats/cve-2026-85046-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2026-87595","cvss":9.8,"epss":0.0042,"slug":"cve-2026-87595-google-chrome-server-side-request-forgery-in-mobile","title":"Google Chrome server-side request forgery in Mobile","severity":"critical","exploited":false,"published_at":"2026-09-09T01:17:17.437+00:00","url":"https://junglewise.ai/threats/cve-2026-87595-google-chrome-server-side-request-forgery-in-mobile"}],"high":126,"name":"Google Chrome","rank":3,"slug":"chrome","score":1119,"vendor":{"name":"Google","slug":"google"},"critical":77,"max_cvss":9.8,"max_epss":0.4888,"exploited":2,"vulnerabilities":462,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":true,"top":[{"cve":"CVE-2026-86950","cvss":8.8,"epss":0.0081,"slug":"cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple CoreGraphics out-of-bounds write in file processing","severity":"critical","exploited":true,"published_at":"2026-09-28T20:17:11.193+00:00","url":"https://junglewise.ai/threats/cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"},{"cve":"CVE-2026-65381","cvss":10,"epss":0.0035,"slug":"cve-2026-65381-apple-macos-sandbox-escape-in-entitlement-verification","title":"Apple macOS sandbox escape in entitlement verification","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:22.46+00:00","url":"https://junglewise.ai/threats/cve-2026-65381-apple-macos-sandbox-escape-in-entitlement-verification"},{"cve":"CVE-2026-75682","cvss":9.9,"epss":0.0054,"slug":"cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of","title":"Adobe Connect SQL injection leading to arbitrary code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.26+00:00","url":"https://junglewise.ai/threats/cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of"}],"high":99,"name":"Apple macOS","rank":4,"slug":"macos-tahoe","score":591,"vendor":{"name":"Apple","slug":"apple"},"critical":19,"max_cvss":10,"max_epss":0.0108,"exploited":1,"vulnerabilities":288,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"hub":true,"top":[{"cve":"CVE-2026-58704","cvss":8.8,"epss":0.0059,"slug":"cve-2026-58704-google-pixel-improper-authorization-in-cellular-modem","title":"In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) esc","severity":"critical","exploited":true,"published_at":"2026-09-15T19:17:32.297+00:00","url":"https://junglewise.ai/threats/cve-2026-58704-google-pixel-improper-authorization-in-cellular-modem"},{"cve":"CVE-2026-56960","cvss":9.8,"epss":0.004,"slug":"cve-2026-56960-google-pixel-use-after-free-in-kernel","title":"Google Pixel use-after-free in kernel","severity":"critical","exploited":false,"published_at":"2026-09-15T19:17:28.76+00:00","url":"https://junglewise.ai/threats/cve-2026-56960-google-pixel-use-after-free-in-kernel"},{"cve":"CVE-2026-55366","cvss":9.8,"epss":0.0046,"slug":"cve-2026-55366-google-pixel-ip-multimedia-subsystem-authentication-bypass","title":"Google Pixel IP Multimedia Subsystem authentication bypass","severity":"critical","exploited":false,"published_at":"2026-09-15T19:17:22.227+00:00","url":"https://junglewise.ai/threats/cve-2026-55366-google-pixel-ip-multimedia-subsystem-authentication-bypass"}],"high":106,"name":"Google Android","rank":5,"slug":"android","score":517,"vendor":{"name":"Google","slug":"google"},"critical":17,"max_cvss":9.8,"max_epss":0.0059,"exploited":1,"vulnerabilities":210,"url":"https://junglewise.ai/threats/technologies/android"},{"hub":true,"top":[{"cve":"CVE-2026-92066","cvss":9.8,"epss":0.0059,"slug":"cve-2026-92066-mozilla-firefox-sandbox-escape-in-profile-backup","title":"Mozilla Firefox sandbox escape in Profile Backup","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:01.283+00:00","url":"https://junglewise.ai/threats/cve-2026-92066-mozilla-firefox-sandbox-escape-in-profile-backup"},{"cve":"CVE-2026-92061","cvss":9.8,"epss":0.0059,"slug":"cve-2026-92061-mozilla-firefox-incorrect-boundary-conditions-in-process","title":"Mozilla Firefox incorrect boundary conditions in process sandboxing","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:00.653+00:00","url":"https://junglewise.ai/threats/cve-2026-92061-mozilla-firefox-incorrect-boundary-conditions-in-process"},{"cve":"CVE-2026-92037","cvss":9.8,"epss":0.0059,"slug":"cve-2026-92037-mozilla-firefox-incorrect-boundary-conditions-in-dom-animation","title":"Mozilla Firefox incorrect boundary conditions in DOM Animation component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:16:55.067+00:00","url":"https://junglewise.ai/threats/cve-2026-92037-mozilla-firefox-incorrect-boundary-conditions-in-dom-animation"}],"high":81,"name":"Mozilla Firefox","rank":6,"slug":"firefox","score":514,"vendor":{"name":"Mozilla","slug":"mozilla"},"critical":36,"max_cvss":9.8,"max_epss":0.0063,"exploited":0,"vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/firefox"},{"hub":true,"top":[{"cve":"CVE-2026-84141","cvss":9.8,"epss":0.0063,"slug":"cve-2026-84141-mozilla-firefox-integer-overflow-in-graphics-imagelib","title":"Mozilla Firefox integer overflow in Graphics: ImageLib","severity":"critical","exploited":false,"published_at":"2026-09-01T13:20:08.23+00:00","url":"https://junglewise.ai/threats/cve-2026-84141-mozilla-firefox-integer-overflow-in-graphics-imagelib"},{"cve":"CVE-2026-84140","cvss":9.8,"epss":0.0029,"slug":"cve-2026-84140-mozilla-firefox-site-isolation-issue-in-dom-navigation-component","title":"Mozilla Firefox site isolation issue in DOM Navigation component","severity":"critical","exploited":false,"published_at":"2026-09-01T13:20:08.127+00:00","url":"https://junglewise.ai/threats/cve-2026-84140-mozilla-firefox-site-isolation-issue-in-dom-navigation-component"},{"cve":"CVE-2026-84134","cvss":9.8,"epss":0.0057,"slug":"cve-2026-84134-mozilla-firefox-other-issue-in-profile-backup-component","title":"Mozilla Firefox other issue in Profile Backup component","severity":"critical","exploited":false,"published_at":"2026-09-01T13:20:07.45+00:00","url":"https://junglewise.ai/threats/cve-2026-84134-mozilla-firefox-other-issue-in-profile-backup-component"}],"high":74,"name":"Mozilla Firefox ESR","rank":7,"slug":"firefox-esr","score":428,"vendor":{"name":"Mozilla","slug":"mozilla"},"critical":27,"max_cvss":9.8,"max_epss":0.0063,"exploited":0,"vulnerabilities":145,"url":"https://junglewise.ai/threats/technologies/firefox-esr"},{"hub":true,"top":[{"cve":"CVE-2026-92238","cvss":9.8,"epss":0.0054,"slug":"cve-2026-92238-mozilla-thunderbird-mail-header-parsing-ambiguity","title":"Mozilla Thunderbird mail header parsing ambiguity","severity":"critical","exploited":false,"published_at":"2026-09-15T20:19:41.477+00:00","url":"https://junglewise.ai/threats/cve-2026-92238-mozilla-thunderbird-mail-header-parsing-ambiguity"},{"cve":"CVE-2026-92066","cvss":9.8,"epss":0.0059,"slug":"cve-2026-92066-mozilla-firefox-sandbox-escape-in-profile-backup","title":"Mozilla Firefox sandbox escape in Profile Backup","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:01.283+00:00","url":"https://junglewise.ai/threats/cve-2026-92066-mozilla-firefox-sandbox-escape-in-profile-backup"},{"cve":"CVE-2026-92061","cvss":9.8,"epss":0.0059,"slug":"cve-2026-92061-mozilla-firefox-incorrect-boundary-conditions-in-process","title":"Mozilla Firefox incorrect boundary conditions in process sandboxing","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:00.653+00:00","url":"https://junglewise.ai/threats/cve-2026-92061-mozilla-firefox-incorrect-boundary-conditions-in-process"}],"high":55,"name":"Mozilla Thunderbird","rank":8,"slug":"thunderbird","score":372,"vendor":{"name":"Mozilla","slug":"mozilla"},"critical":31,"max_cvss":9.8,"max_epss":0.0063,"exploited":0,"vulnerabilities":107,"url":"https://junglewise.ai/threats/technologies/thunderbird"},{"hub":true,"top":[{"cve":"CVE-2026-65381","cvss":10,"epss":0.0035,"slug":"cve-2026-65381-apple-macos-sandbox-escape-in-entitlement-verification","title":"Apple macOS sandbox escape in entitlement verification","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:22.46+00:00","url":"https://junglewise.ai/threats/cve-2026-65381-apple-macos-sandbox-escape-in-entitlement-verification"},{"cve":"CVE-2026-84609","cvss":9.8,"epss":0.0067,"slug":"cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation","title":"Apple iOS APFS permissions bypass in path validation","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:36.133+00:00","url":"https://junglewise.ai/threats/cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation"},{"cve":"CVE-2026-84561","cvss":9.8,"epss":0.0068,"slug":"cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in","title":"Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS double free in memory management","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:32.173+00:00","url":"https://junglewise.ai/threats/cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in"}],"high":54,"name":"Apple macOS Golden Gate","rank":9,"slug":"macos-golden-gate","score":320,"vendor":{"name":"Apple","slug":"apple"},"critical":8,"max_cvss":10,"max_epss":0.0108,"exploited":0,"vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"hub":true,"top":[{"cve":"CVE-2026-87230","cvss":10,"epss":0.0043,"slug":"cve-2026-87230-oracle-hyperion-financial-management-authentication-bypass","title":"Oracle Hyperion Financial Management authentication bypass","severity":"critical","exploited":false,"published_at":"2026-09-15T20:19:11.513+00:00","url":"https://junglewise.ai/threats/cve-2026-87230-oracle-hyperion-financial-management-authentication-bypass"},{"cve":"CVE-2026-87172","cvss":9.9,"epss":0.0043,"slug":"cve-2026-87172-oracle-hyperion-financial-management-authentication-bypass-in","title":"Oracle Hyperion Financial Management authentication bypass in Security component","severity":"critical","exploited":false,"published_at":"2026-09-15T20:19:04.97+00:00","url":"https://junglewise.ai/threats/cve-2026-87172-oracle-hyperion-financial-management-authentication-bypass-in"},{"cve":"CVE-2026-87188","cvss":9.8,"epss":0.0051,"slug":"cve-2026-87188-oracle-hyperion-financial-management-authentication-bypass","title":"Oracle Hyperion Financial Management authentication bypass","severity":"critical","exploited":false,"published_at":"2026-09-15T20:19:06.727+00:00","url":"https://junglewise.ai/threats/cve-2026-87188-oracle-hyperion-financial-management-authentication-bypass"}],"high":66,"name":"Oracle Hyperion Financial Management","rank":10,"slug":"hyperion-financial-management","score":277,"vendor":{"name":"Oracle","slug":"oracle"},"critical":13,"max_cvss":10,"max_epss":0.0059,"exploited":0,"vulnerabilities":80,"url":"https://junglewise.ai/threats/technologies/hyperion-financial-management"},{"hub":true,"top":[{"cve":"CVE-2026-86950","cvss":8.8,"epss":0.0081,"slug":"cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple CoreGraphics out-of-bounds write in file processing","severity":"critical","exploited":true,"published_at":"2026-09-28T20:17:11.193+00:00","url":"https://junglewise.ai/threats/cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"},{"cve":"CVE-2026-84609","cvss":9.8,"epss":0.0067,"slug":"cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation","title":"Apple iOS APFS permissions bypass in path validation","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:36.133+00:00","url":"https://junglewise.ai/threats/cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation"},{"cve":"CVE-2026-84561","cvss":9.8,"epss":0.0068,"slug":"cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in","title":"Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS double free in memory management","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:32.173+00:00","url":"https://junglewise.ai/threats/cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in"}],"high":37,"name":"Apple iPadOS","rank":11,"slug":"ipados","score":254,"vendor":{"name":"Apple","slug":"apple"},"critical":6,"max_cvss":9.8,"max_epss":0.0108,"exploited":1,"vulnerabilities":140,"url":"https://junglewise.ai/threats/technologies/ipados"},{"hub":true,"top":[{"cve":"CVE-2026-93606","cvss":10,"epss":0.0071,"slug":"cve-2026-93606-vm2-sandbox-escape-via-promise-symbol-species-hijack","title":"vm2 sandbox escape via Promise Symbol.species hijack","severity":"critical","exploited":false,"published_at":"2026-09-18T14:19:12.5+00:00","url":"https://junglewise.ai/threats/cve-2026-93606-vm2-sandbox-escape-via-promise-symbol-species-hijack"},{"cve":"CVE-2026-93605","cvss":10,"epss":0.0073,"slug":"cve-2026-93605-vm2-nodevm-sandbox-escape-via-child-process-denylist-omission","title":"vm2 NodeVM sandbox escape via child_process denylist omission","severity":"critical","exploited":false,"published_at":"2026-09-18T14:19:12.34+00:00","url":"https://junglewise.ai/threats/cve-2026-93605-vm2-nodevm-sandbox-escape-via-child-process-denylist-omission"},{"cve":"CVE-2026-93603","cvss":10,"epss":0.0073,"slug":"cve-2026-93603-vm2-sandbox-escape-via-nullish-this-receiver","title":"vm2 sandbox escape via nullish this receiver","severity":"critical","exploited":false,"published_at":"2026-09-18T14:19:12.003+00:00","url":"https://junglewise.ai/threats/cve-2026-93603-vm2-sandbox-escape-via-nullish-this-receiver"}],"high":9,"name":"vm2 (npm)","rank":12,"slug":"vm2","score":231,"vendor":{"name":"npm","slug":"npm"},"critical":30,"max_cvss":10,"max_epss":0.0103,"exploited":0,"vulnerabilities":63,"url":"https://junglewise.ai/threats/technologies/vm2"},{"hub":true,"top":[{"cve":"CVE-2026-86189","cvss":9.8,"epss":0.0071,"slug":"cve-2026-86189-wwbn-avideo-path-traversal-in-notify-ffmpeg-json-php","title":"WWBN AVideo path traversal in notify.ffmpeg.json.php","severity":"critical","exploited":false,"published_at":"2026-09-05T13:18:14+00:00","url":"https://junglewise.ai/threats/cve-2026-86189-wwbn-avideo-path-traversal-in-notify-ffmpeg-json-php"},{"cve":"CVE-2026-85154","cvss":9.8,"epss":0.0064,"slug":"cve-2026-85154-wwbn-avideo-authentication-bypass-in-video-id-hash-credential","title":"WWBN AVideo authentication bypass in video_id_hash credential","severity":"critical","exploited":false,"published_at":"2026-09-03T13:06:22.067+00:00","url":"https://junglewise.ai/threats/cve-2026-85154-wwbn-avideo-authentication-bypass-in-video-id-hash-credential"},{"cve":"CVE-2026-84480","cvss":9.8,"epss":0.0051,"slug":"cve-2026-84480-wwbn-avideo-password-recovery-token-expiration-bypass","title":"WWBN AVideo password recovery token expiration bypass","severity":"critical","exploited":false,"published_at":"2026-09-01T23:17:22.22+00:00","url":"https://junglewise.ai/threats/cve-2026-84480-wwbn-avideo-password-recovery-token-expiration-bypass"}],"high":45,"name":"WWBN AVideo","rank":13,"slug":"avideo","score":226,"vendor":{"name":"WWBN","slug":"wwbn"},"critical":6,"max_cvss":9.8,"max_epss":0.0145,"exploited":0,"vulnerabilities":106,"url":"https://junglewise.ai/threats/technologies/avideo"},{"hub":true,"top":[{"cve":"CVE-2026-84078","cvss":9.9,"epss":0.0047,"slug":"cve-2026-84078-ibm-guardium-data-protection-12-2-is-vulnerable-to-a-missing","title":"IBM Guardium Data Protection missing authentication in LoadBalancerServlet","severity":"critical","exploited":false,"published_at":"2026-09-18T20:17:27.48+00:00","url":"https://junglewise.ai/threats/cve-2026-84078-ibm-guardium-data-protection-12-2-is-vulnerable-to-a-missing"},{"cve":"CVE-2026-84075","cvss":9.9,"epss":0.0059,"slug":"cve-2026-84075-ibm-guardium-data-protection-12-2-could-allow-a-remote-attacker","title":"IBM Guardium Data Protection authentication bypass in ChangeTrackerServlet","severity":"critical","exploited":false,"published_at":"2026-09-18T20:17:27.103+00:00","url":"https://junglewise.ai/threats/cve-2026-84075-ibm-guardium-data-protection-12-2-could-allow-a-remote-attacker"},{"cve":"CVE-2026-84064","cvss":9.9,"epss":0.0062,"slug":"cve-2026-84064-ibm-guardium-data-protection-12-2-could-allow-a-remote","title":"IBM Guardium Data Protection SQL injection","severity":"critical","exploited":false,"published_at":"2026-09-18T20:17:26.44+00:00","url":"https://junglewise.ai/threats/cve-2026-84064-ibm-guardium-data-protection-12-2-could-allow-a-remote"}],"high":37,"name":"IBM Guardium Data Protection","rank":14,"slug":"guardium-data-protection","score":191,"vendor":{"name":"IBM","slug":"ibm"},"critical":13,"max_cvss":9.9,"max_epss":0.0145,"exploited":0,"vulnerabilities":52,"url":"https://junglewise.ai/threats/technologies/guardium-data-protection"},{"hub":true,"top":[{"cve":"CVE-2026-84609","cvss":9.8,"epss":0.0067,"slug":"cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation","title":"Apple iOS APFS permissions bypass in path validation","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:36.133+00:00","url":"https://junglewise.ai/threats/cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation"},{"cve":"CVE-2026-84561","cvss":9.8,"epss":0.0068,"slug":"cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in","title":"Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS double free in memory management","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:32.173+00:00","url":"https://junglewise.ai/threats/cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in"},{"cve":"CVE-2026-65414","cvss":9.8,"epss":0.0108,"slug":"cve-2026-65414-apple-ios-and-ipados-out-of-bounds-write-in-accelerate-framework","title":"Apple iOS and iPadOS out-of-bounds write in Accelerate Framework","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:25.057+00:00","url":"https://junglewise.ai/threats/cve-2026-65414-apple-ios-and-ipados-out-of-bounds-write-in-accelerate-framework"}],"high":25,"name":"Apple visionOS","rank":15,"slug":"visionos","score":172,"vendor":{"name":"Apple","slug":"apple"},"critical":5,"max_cvss":9.8,"max_epss":0.0108,"exploited":0,"vulnerabilities":97,"url":"https://junglewise.ai/threats/technologies/visionos"},{"hub":true,"top":[{"cve":"CVE-2026-47601","cvss":7.8,"slug":"cve-2026-47601-nvidia-gpu-display-driver-for-windows-and-linux-contains-a","title":"NVIDIA GPU Display Driver DMA-BUF privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-30T16:17:30.563+00:00","url":"https://junglewise.ai/threats/cve-2026-47601-nvidia-gpu-display-driver-for-windows-and-linux-contains-a"},{"cve":"CVE-2026-47600","cvss":7.8,"slug":"cve-2026-47600-nvidia-gpu-display-driver-for-windows-and-linux-contains-a","title":"NVIDIA GPU Display Driver kernel mode error-handling code execution","severity":"high","exploited":false,"published_at":"2026-09-30T16:17:30.4+00:00","url":"https://junglewise.ai/threats/cve-2026-47600-nvidia-gpu-display-driver-for-windows-and-linux-contains-a"},{"cve":"CVE-2026-47599","cvss":7.8,"slug":"cve-2026-47599-nvidia-gpu-display-driver-for-linux-contains-a-vulnerability-in","title":"NVIDIA GPU Display Driver for Linux DMA memory access vulnerability","severity":"high","exploited":false,"published_at":"2026-09-30T16:17:30.27+00:00","url":"https://junglewise.ai/threats/cve-2026-47599-nvidia-gpu-display-driver-for-linux-contains-a-vulnerability-in"}],"high":45,"name":"NVIDIA GPU Display Driver","rank":16,"slug":"gpu-display-driver","score":163,"vendor":{"name":"Nvidia","slug":"nvidia"},"critical":0,"max_cvss":7.8,"max_epss":null,"exploited":0,"vulnerabilities":73,"url":"https://junglewise.ai/threats/technologies/gpu-display-driver"},{"hub":true,"top":[{"cve":"CVE-2026-72811","cvss":10,"epss":0.0044,"slug":"cve-2026-72811-siyuan-backlink-search-sql-injection-via-unescaped-metadata","title":"SiYuan backlink search SQL injection via unescaped metadata concatenation","severity":"critical","exploited":false,"published_at":"2026-09-03T22:27:50+00:00","url":"https://junglewise.ai/threats/cve-2026-72811-siyuan-backlink-search-sql-injection-via-unescaped-metadata"},{"cve":"CVE-2026-69083","cvss":10,"epss":0.0048,"slug":"cve-2026-69083-siyuan-fulltextsearchassetcontent-sql-injection-and-regexp","title":"SiYuan fullTextSearchAssetContent SQL injection and REGEXP breakout","severity":"critical","exploited":false,"published_at":"2026-09-03T21:01:05+00:00","url":"https://junglewise.ai/threats/cve-2026-69083-siyuan-fulltextsearchassetcontent-sql-injection-and-regexp"},{"cve":"CVE-2026-69084","cvss":10,"epss":0.0157,"slug":"cve-2026-69084-siyuan-arbitrary-sql-execution-via-searchembedblock","title":"SiYuan arbitrary SQL execution via searchEmbedBlock","severity":"critical","exploited":false,"published_at":"2026-09-03T20:19:22+00:00","url":"https://junglewise.ai/threats/cve-2026-69084-siyuan-arbitrary-sql-execution-via-searchembedblock"}],"high":34,"name":"SiYuan","rank":17,"slug":"siyuan","score":156,"vendor":{"name":"SiYuan","slug":"siyuan"},"critical":4,"max_cvss":10,"max_epss":0.0157,"exploited":0,"vulnerabilities":68,"url":"https://junglewise.ai/threats/technologies/siyuan"},{"hub":true,"top":[{"cve":"CVE-2026-84609","cvss":9.8,"epss":0.0067,"slug":"cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation","title":"Apple iOS APFS permissions bypass in path validation","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:36.133+00:00","url":"https://junglewise.ai/threats/cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation"},{"cve":"CVE-2026-84561","cvss":9.8,"epss":0.0068,"slug":"cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in","title":"Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS double free in memory management","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:32.173+00:00","url":"https://junglewise.ai/threats/cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in"},{"cve":"CVE-2026-65414","cvss":9.8,"epss":0.0108,"slug":"cve-2026-65414-apple-ios-and-ipados-out-of-bounds-write-in-accelerate-framework","title":"Apple iOS and iPadOS out-of-bounds write in Accelerate Framework","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:25.057+00:00","url":"https://junglewise.ai/threats/cve-2026-65414-apple-ios-and-ipados-out-of-bounds-write-in-accelerate-framework"}],"high":21,"name":"Apple watchOS","rank":18,"slug":"watchos","score":149,"vendor":{"name":"Apple","slug":"apple"},"critical":5,"max_cvss":9.8,"max_epss":0.0108,"exploited":0,"vulnerabilities":82,"url":"https://junglewise.ai/threats/technologies/watchos"},{"hub":true,"top":[{"cve":"CVE-2026-67643","cvss":9.8,"epss":0.0097,"slug":"cve-2026-67643-microsoft-sql-server-heap-based-buffer-overflow","title":"Microsoft SQL Server heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-09-08T18:18:24.53+00:00","url":"https://junglewise.ai/threats/cve-2026-67643-microsoft-sql-server-heap-based-buffer-overflow"},{"cve":"CVE-2026-67631","cvss":9.8,"epss":0.0097,"slug":"cve-2026-67631-microsoft-sql-server-heap-buffer-overflow","title":"Microsoft SQL Server heap buffer overflow","severity":"critical","exploited":false,"published_at":"2026-09-08T18:18:23.59+00:00","url":"https://junglewise.ai/threats/cve-2026-67631-microsoft-sql-server-heap-buffer-overflow"},{"cve":"CVE-2026-65669","cvss":9.6,"epss":0.0088,"slug":"cve-2026-65669-microsoft-sql-server-sql-injection-privilege-escalation","title":"Microsoft SQL Server SQL injection privilege escalation","severity":"critical","exploited":false,"published_at":"2026-09-08T18:18:14.893+00:00","url":"https://junglewise.ai/threats/cve-2026-65669-microsoft-sql-server-sql-injection-privilege-escalation"}],"high":31,"name":"Microsoft SQL Server","rank":19,"slug":"sql-server","score":147,"vendor":{"name":"Microsoft","slug":"microsoft"},"critical":5,"max_cvss":9.8,"max_epss":0.0169,"exploited":0,"vulnerabilities":60,"url":"https://junglewise.ai/threats/technologies/sql-server"},{"hub":true,"top":[{"cve":"CVE-2026-84609","cvss":9.8,"epss":0.0067,"slug":"cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation","title":"Apple iOS APFS permissions bypass in path validation","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:36.133+00:00","url":"https://junglewise.ai/threats/cve-2026-84609-apple-ios-apfs-permissions-bypass-in-path-validation"},{"cve":"CVE-2026-84561","cvss":9.8,"epss":0.0068,"slug":"cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in","title":"Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS double free in memory management","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:32.173+00:00","url":"https://junglewise.ai/threats/cve-2026-84561-apple-ios-ipados-macos-tvos-visionos-and-watchos-double-free-in"},{"cve":"CVE-2026-65414","cvss":9.8,"epss":0.0108,"slug":"cve-2026-65414-apple-ios-and-ipados-out-of-bounds-write-in-accelerate-framework","title":"Apple iOS and iPadOS out-of-bounds write in Accelerate Framework","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:25.057+00:00","url":"https://junglewise.ai/threats/cve-2026-65414-apple-ios-and-ipados-out-of-bounds-write-in-accelerate-framework"}],"high":22,"name":"Apple tvOS","rank":20,"slug":"tvos","score":142,"vendor":{"name":"Apple","slug":"apple"},"critical":4,"max_cvss":9.8,"max_epss":0.0108,"exploited":0,"vulnerabilities":78,"url":"https://junglewise.ai/threats/technologies/tvos"},{"hub":true,"top":[{"cve":"CVE-2026-16346","cvss":9.9,"epss":0.0045,"slug":"cve-2026-16346-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote","title":"IBM DataStage command injection on Cloud Pak for Data","severity":"critical","exploited":false,"published_at":"2026-09-22T22:17:06.607+00:00","url":"https://junglewise.ai/threats/cve-2026-16346-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote"},{"cve":"CVE-2026-16338","cvss":9.9,"epss":0.0043,"slug":"cve-2026-16338-ibm-datastage-arbitrary-file-write-via-path-validation-bypass","title":"IBM DataStage arbitrary file write via path validation bypass","severity":"critical","exploited":false,"published_at":"2026-09-14T20:16:40.41+00:00","url":"https://junglewise.ai/threats/cve-2026-16338-ibm-datastage-arbitrary-file-write-via-path-validation-bypass"},{"cve":"CVE-2026-81549","cvss":9.6,"epss":0.0026,"slug":"cve-2026-81549-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote","title":"IBM DataStage on Cloud Pak for Data SSRF via X-Forwarded-Proto header","severity":"critical","exploited":false,"published_at":"2026-09-24T15:17:39.897+00:00","url":"https://junglewise.ai/threats/cve-2026-81549-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote"}],"high":30,"name":"IBM Datastage On Cloud Pak For Data","rank":21,"slug":"datastage-on-cloud-pak-for-data","score":126,"vendor":{"name":"IBM","slug":"ibm"},"critical":6,"max_cvss":9.9,"max_epss":0.0167,"exploited":0,"vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data"},{"hub":true,"top":[{"cve":"CVE-2026-83327","cvss":9.8,"epss":0.0046,"slug":"cve-2026-83327-oracle-e-business-suite-applications-framework-soap","title":"Oracle E-Business Suite Applications Framework SOAP authentication bypass","severity":"critical","exploited":false,"published_at":"2026-09-15T20:18:45.88+00:00","url":"https://junglewise.ai/threats/cve-2026-83327-oracle-e-business-suite-applications-framework-soap"},{"cve":"CVE-2026-87163","cvss":8.8,"epss":0.0043,"slug":"cve-2026-87163-oracle-e-business-suite-purchasing-privilege-escalation","title":"Oracle E-Business Suite Purchasing privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:03.947+00:00","url":"https://junglewise.ai/threats/cve-2026-87163-oracle-e-business-suite-purchasing-privilege-escalation"},{"cve":"CVE-2026-87155","cvss":8.8,"epss":0.0043,"slug":"cve-2026-87155-oracle-e-business-suite-product-hub-remote-code-execution","title":"Oracle E-Business Suite Product Hub remote code execution","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:02.99+00:00","url":"https://junglewise.ai/threats/cve-2026-87155-oracle-e-business-suite-product-hub-remote-code-execution"}],"high":39,"name":"Oracle E-Business Suite","rank":22,"slug":"e-business-suite","score":125,"vendor":{"name":"Oracle","slug":"oracle"},"critical":1,"max_cvss":9.8,"max_epss":0.0046,"exploited":0,"vulnerabilities":42,"url":"https://junglewise.ai/threats/technologies/e-business-suite"},{"hub":true,"top":[{"cve":"CVE-2026-87609","cvss":9.6,"epss":0.0043,"slug":"cve-2026-87609-google-chrome-use-after-free-in-sharing-on-ios","title":"Google Chrome use-after-free in Sharing on iOS","severity":"critical","exploited":false,"published_at":"2026-09-09T01:17:18.987+00:00","url":"https://junglewise.ai/threats/cve-2026-87609-google-chrome-use-after-free-in-sharing-on-ios"},{"cve":"CVE-2026-85047","cvss":9.6,"epss":0.0046,"slug":"cve-2026-85047-google-chrome-improper-input-validation-in-transactions-platform","title":"Google Chrome improper input validation in Transactions Platform on iOS","severity":"critical","exploited":false,"published_at":"2026-09-03T20:17:24.69+00:00","url":"https://junglewise.ai/threats/cve-2026-85047-google-chrome-improper-input-validation-in-transactions-platform"},{"cve":"CVE-2026-84625","cvss":9.1,"epss":0.0047,"slug":"cve-2026-84625-apple-ios-permissions-issue-allowing-user-fingerprinting","title":"Apple iOS permissions issue allowing user fingerprinting","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:37.523+00:00","url":"https://junglewise.ai/threats/cve-2026-84625-apple-ios-permissions-issue-allowing-user-fingerprinting"}],"high":19,"name":"Apple Iphone Os","rank":23,"slug":"iphone-os","score":123,"vendor":{"name":"Apple","slug":"apple"},"critical":3,"max_cvss":9.6,"max_epss":0.0051,"exploited":0,"vulnerabilities":70,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"hub":true,"top":[{"cve":"CVE-2026-18169","cvss":9.9,"epss":0.0053,"slug":"cve-2026-18169-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could","title":"IBM Financial Transaction Manager symbolic link validation bypass","severity":"critical","exploited":false,"published_at":"2026-09-22T23:17:06.73+00:00","url":"https://junglewise.ai/threats/cve-2026-18169-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could"},{"cve":"CVE-2026-18163","cvss":9.8,"epss":0.0051,"slug":"cve-2026-18163-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could","title":"IBM Financial Transaction Manager arbitrary code execution via deserialization","severity":"critical","exploited":false,"published_at":"2026-09-22T23:17:06.6+00:00","url":"https://junglewise.ai/threats/cve-2026-18163-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could"},{"cve":"CVE-2026-18162","cvss":9.8,"epss":0.0048,"slug":"cve-2026-18162-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could","title":"IBM Financial Transaction Manager remote code execution in Function constructor","severity":"critical","exploited":false,"published_at":"2026-09-22T23:17:06.463+00:00","url":"https://junglewise.ai/threats/cve-2026-18162-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could"}],"high":24,"name":"IBM Financial Transaction Manager","rank":24,"slug":"financial-transaction-manager","score":123,"vendor":{"name":"IBM","slug":"ibm"},"critical":6,"max_cvss":9.9,"max_epss":0.0053,"exploited":0,"vulnerabilities":45,"url":"https://junglewise.ai/threats/technologies/financial-transaction-manager"},{"hub":true,"top":[{"cve":"CVE-2026-76658","cvss":10,"epss":0.0075,"slug":"cve-2026-76658-hpe-networking-fabric-composer-ssh-daemon-auth-bypass","title":"HPE Networking Fabric Composer SSH daemon auth bypass","severity":"critical","exploited":false,"published_at":"2026-09-01T20:17:23.097+00:00","url":"https://junglewise.ai/threats/cve-2026-76658-hpe-networking-fabric-composer-ssh-daemon-auth-bypass"},{"cve":"CVE-2026-76657","cvss":10,"epss":0.0075,"slug":"cve-2026-76657-hpe-networking-fabric-composer-api-authentication-bypass","title":"HPE Networking Fabric Composer API authentication bypass","severity":"critical","exploited":false,"published_at":"2026-09-01T20:17:22.99+00:00","url":"https://junglewise.ai/threats/cve-2026-76657-hpe-networking-fabric-composer-api-authentication-bypass"},{"cve":"CVE-2026-19766","cvss":9.6,"epss":0.0026,"slug":"cve-2026-19766-hpe-networking-fabric-composer-authentication-bypass-in-os","title":"HPE Networking Fabric Composer authentication bypass in OS","severity":"critical","exploited":false,"published_at":"2026-09-01T20:17:12.76+00:00","url":"https://junglewise.ai/threats/cve-2026-19766-hpe-networking-fabric-composer-authentication-bypass-in-os"}],"high":23,"name":"Arubanetworks Fabric Composer","rank":25,"slug":"fabric-composer","score":122,"vendor":{"name":"Arubanetworks","slug":"arubanetworks"},"critical":5,"max_cvss":10,"max_epss":0.0145,"exploited":0,"vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/fabric-composer"}],"previous":{"key":"2026-08","top":"Linux Kernel","period":{"end":"2026-08-31","start":"2026-08-01"},"totals":{"high":2982,"critical":1015,"exploited":24,"technologies":3961,"vulnerabilities":8028},"url":"https://junglewise.ai/threats/monthly/2026-08"},"next":{"key":"2026-10","top":"Microsoft Windows","period":{"end":"2026-10-31","start":"2026-10-01"},"totals":{"high":4731,"tracked":30558,"critical":1051,"exploited":24,"technologies":7346,"vulnerabilities":16643},"url":"https://junglewise.ai/threats/monthly/2026-10"}}