{"schema_version":1,"title":"Most vulnerable technologies in October 2026","summary":"In October 2026, Junglewise Threat Intelligence recorded 16,643 new vulnerabilities: 1,051 critical, 4,731 high and 24 exploited in the wild. The most vulnerable technology was Microsoft Windows, with 677 vulnerabilities (21 critical, 1 exploited in the wild), followed by Linux Kernel (1,041) and Google Chrome (732).","url":"https://junglewise.ai/threats/monthly/2026-10","json_url":"https://junglewise.ai/threats/monthly/2026-10.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/monthly/2026-10","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"Technologies are ranked by 10 points per vulnerability exploited in the wild, 5 per critical, 2 per high and 1 per vulnerability, over vulnerabilities published in the period (UTC). A vulnerability counts for every technology it affects.","kind":"month","period":{"end":"2026-10-31","start":"2026-10-01"},"totals":{"high":4731,"tracked":30558,"critical":1051,"exploited":24,"technologies":7346,"vulnerabilities":16643},"notable":[{"cve":"CVE-2026-97229","cvss":10,"epss":0.1843,"slug":"cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all","title":"GitLab CE/EE integer overflow in CI/CD regular expression compiler","severity":"critical","exploited":true,"published_at":"2026-10-13T02:17:00.84+00:00","url":"https://junglewise.ai/threats/cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all"},{"cve":"CVE-2026-105134","cvss":10,"epss":0.0184,"slug":"cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this","title":"Ahsay AhsayCBS OS command injection in UpdateReceivers","severity":"critical","exploited":true,"published_at":"2026-10-04T07:16:33.48+00:00","url":"https://junglewise.ai/threats/cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this"},{"cve":"CVE-2026-114625","cvss":9.9,"epss":0.0056,"slug":"cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where","title":"Arista VeloCloud Orchestrator privilege escalation","severity":"critical","exploited":true,"published_at":"2026-10-22T21:17:16.87+00:00","url":"https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where"},{"cve":"CVE-2026-104286","cvss":9.8,"epss":0.022,"slug":"cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability","title":"Fortinet FortiMail path traversal vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-01T20:17:24.01+00:00","url":"https://junglewise.ai/threats/cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability"},{"cve":"CVE-2026-102764","cvss":9.8,"epss":0.006,"slug":"cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing","title":"BeyondTrust Remote Support authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-15T21:17:00.117+00:00","url":"https://junglewise.ai/threats/cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing"},{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-104935","cvss":8.6,"epss":0.2598,"slug":"cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing","title":"Ivanti Connect Secure authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-13T16:17:11.64+00:00","url":"https://junglewise.ai/threats/cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing"},{"cve":"CVE-2026-76418","cvss":8.6,"epss":0.0057,"slug":"cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco","title":"Cisco Secure Firewall ASA and FTD SSL VPN denial of service","severity":"critical","exploited":true,"published_at":"2026-10-28T20:18:47.063+00:00","url":"https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco"},{"cve":"CVE-2026-106931","cvss":7.8,"epss":0.0066,"slug":"cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection","title":"EG Secure Solutions SiteGuard Server Edition OS command injection","severity":"critical","exploited":true,"published_at":"2026-10-14T05:16:42.633+00:00","url":"https://junglewise.ai/threats/cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection"},{"cve":"CVE-2026-88779","cvss":7.5,"epss":0.0053,"slug":"cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog","title":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-04T04:16:43.68+00:00","url":"https://junglewise.ai/threats/cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog"}],"vendors":[{"hub":true,"high":921,"name":"Microsoft","rank":1,"slug":"microsoft","critical":62,"exploited":1,"vulnerabilities":1323,"url":"https://junglewise.ai/threats/vendors/microsoft"},{"hub":true,"high":383,"name":"Oracle","rank":2,"slug":"oracle","critical":66,"exploited":0,"vulnerabilities":988,"url":"https://junglewise.ai/threats/vendors/oracle"},{"hub":true,"high":8,"name":"Linux","rank":3,"slug":"linux","critical":0,"exploited":0,"vulnerabilities":971,"url":"https://junglewise.ai/threats/vendors/linux"},{"hub":true,"high":43,"name":"Google","rank":4,"slug":"google","critical":13,"exploited":2,"vulnerabilities":792,"url":"https://junglewise.ai/threats/vendors/google"},{"hub":true,"high":115,"name":"IBM","rank":5,"slug":"ibm","critical":29,"exploited":0,"vulnerabilities":240,"url":"https://junglewise.ai/threats/vendors/ibm"},{"hub":true,"high":92,"name":"Adobe","rank":6,"slug":"adobe","critical":31,"exploited":0,"vulnerabilities":171,"url":"https://junglewise.ai/threats/vendors/adobe"},{"hub":true,"high":45,"name":"Apache","rank":7,"slug":"apache","critical":15,"exploited":0,"vulnerabilities":334,"url":"https://junglewise.ai/threats/vendors/apache"},{"hub":true,"high":28,"name":"Apple","rank":8,"slug":"apple","critical":0,"exploited":0,"vulnerabilities":392,"url":"https://junglewise.ai/threats/vendors/apple"},{"hub":true,"high":11,"name":"Mozilla","rank":9,"slug":"mozilla","critical":4,"exploited":0,"vulnerabilities":270,"url":"https://junglewise.ai/threats/vendors/mozilla"},{"hub":true,"high":47,"name":"Dell","rank":10,"slug":"dell","critical":14,"exploited":0,"vulnerabilities":110,"url":"https://junglewise.ai/threats/vendors/dell"}],"generated_at":"2026-11-02T00:07:00.12702+00:00","technologies":[{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"}],"high":504,"name":"Microsoft Windows","rank":1,"slug":"windows","score":1800,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":21,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":677,"url":"https://junglewise.ai/threats/technologies/windows"},{"hub":true,"top":[{"cve":"CVE-2026-96957","cvss":8.8,"epss":0.0046,"slug":"cve-2026-96957-improper-verification-of-cryptographic-signature-in-net-allows-an","title":".NET cryptographic signature verification bypass","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.267+00:00","url":"https://junglewise.ai/threats/cve-2026-96957-improper-verification-of-cryptographic-signature-in-net-allows-an"},{"cve":"CVE-2026-96960","cvss":7.5,"epss":0.0106,"slug":"cve-2026-96960-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.67+00:00","url":"https://junglewise.ai/threats/cve-2026-96960-microsoft-security-advisory-net-and-visual-studio-denial-of"},{"cve":"CVE-2026-96959","cvss":7.5,"epss":0.0077,"slug":"cve-2026-96959-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.527+00:00","url":"https://junglewise.ai/threats/cve-2026-96959-microsoft-security-advisory-net-and-visual-studio-denial-of"}],"high":8,"name":"Linux Kernel","rank":2,"slug":"kernel","score":1057,"vendor":{"hub":true,"name":"Linux","slug":"linux"},"critical":0,"max_cvss":8.8,"max_epss":0.0106,"exploited":0,"vulnerabilities":1041,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"top":[{"cve":"CVE-2026-110165","cvss":9.6,"epss":0.0031,"slug":"cve-2026-110165-use-after-free-in-core-in-google-chrome-on-on-android-prior-to","title":"Google Chrome use-after-free in Core on Android","severity":"critical","exploited":false,"published_at":"2026-10-13T22:17:36.48+00:00","url":"https://junglewise.ai/threats/cve-2026-110165-use-after-free-in-core-in-google-chrome-on-on-android-prior-to"},{"cve":"CVE-2026-110161","cvss":9.6,"epss":0.0034,"slug":"cve-2026-110161-use-after-free-in-network-in-google-chrome-prior-to-155-0-8059","title":"Google Chrome use after free in Network component","severity":"critical","exploited":false,"published_at":"2026-10-13T22:17:36.05+00:00","url":"https://junglewise.ai/threats/cve-2026-110161-use-after-free-in-network-in-google-chrome-prior-to-155-0-8059"},{"cve":"CVE-2026-110159","cvss":9.6,"epss":0.0025,"slug":"cve-2026-110159-incorrect-authorization-in-updater-in-google-chrome-prior-to-155","title":"Google Chrome incorrect authorization in Updater","severity":"critical","exploited":false,"published_at":"2026-10-13T22:17:35.833+00:00","url":"https://junglewise.ai/threats/cve-2026-110159-incorrect-authorization-in-updater-in-google-chrome-prior-to-155"}],"high":34,"name":"Google Chrome","rank":3,"slug":"chrome","score":845,"vendor":{"hub":true,"name":"Google","slug":"google"},"critical":9,"max_cvss":9.6,"max_epss":0.0041,"exploited":0,"vulnerabilities":732,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":195,"name":"Microsoft Windows Server 2025","rank":4,"slug":"windows-server-2025","score":788,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":18,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":298,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":182,"name":"Microsoft Windows 11 24h2","rank":5,"slug":"windows-11-24h2","score":689,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":260,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":182,"name":"Microsoft Windows 11 25h2","rank":6,"slug":"windows-11-25h2","score":689,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":260,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":179,"name":"Microsoft Windows 11 26h2","rank":7,"slug":"windows-11-26h2","score":679,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":256,"url":"https://junglewise.ai/threats/technologies/windows-11-26h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":175,"name":"Microsoft Windows 11 26h1","rank":8,"slug":"windows-11-26h1","score":669,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":254,"url":"https://junglewise.ai/threats/technologies/windows-11-26h1"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":152,"name":"Microsoft Windows Server 2022","rank":9,"slug":"windows-server-2022","score":650,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":18,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":246,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":151,"name":"Microsoft Windows 11 23h2","rank":10,"slug":"windows-11-23h2","score":586,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":219,"url":"https://junglewise.ai/threats/technologies/windows-11-23h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":130,"name":"Microsoft Windows Server 2019","rank":11,"slug":"windows-server-2019","score":567,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":16,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":217,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":124,"name":"Microsoft Windows 10 1809","rank":12,"slug":"windows-10-1809","score":533,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":15,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":200,"url":"https://junglewise.ai/threats/technologies/windows-10-1809"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"}],"high":108,"name":"Microsoft Windows Server 2016","rank":13,"slug":"windows-server-2016","score":478,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":13,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":187,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":114,"name":"Microsoft Windows 10 21h2","rank":14,"slug":"windows-10-21h2","score":455,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":9,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/windows-10-21h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"}],"high":102,"name":"Microsoft Windows 10 1607","rank":15,"slug":"windows-10-1607","score":452,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":13,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":173,"url":"https://junglewise.ai/threats/technologies/windows-10-1607"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":113,"name":"Microsoft Windows 10 22h2","rank":16,"slug":"windows-10-22h2","score":452,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":9,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":171,"url":"https://junglewise.ai/threats/technologies/windows-10-22h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"}],"high":94,"name":"Microsoft Windows Server 2012","rank":17,"slug":"windows-server-2012","score":433,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":13,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":170,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"hub":true,"top":[{"cve":"CVE-2026-86929","cvss":8.8,"slug":"cve-2026-86929-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple macOS out-of-bounds write in Accelerate Framework","severity":"high","exploited":false,"published_at":"2026-10-26T21:20:30.323+00:00","url":"https://junglewise.ai/threats/cve-2026-86929-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"},{"cve":"CVE-2026-64759","cvss":8.8,"slug":"cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation","title":"Apple iOS integer overflow in image processing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:33.897+00:00","url":"https://junglewise.ai/threats/cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation"},{"cve":"CVE-2026-112688","cvss":8.8,"slug":"cve-2026-112688-a-memory-corruption-issue-was-addressed-with-improved-memory","title":"Apple iOS and iPadOS memory corruption in file parsing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:03.177+00:00","url":"https://junglewise.ai/threats/cve-2026-112688-a-memory-corruption-issue-was-addressed-with-improved-memory"}],"high":22,"name":"Apple macOS","rank":18,"slug":"macos","score":305,"vendor":{"hub":true,"name":"Apple","slug":"apple"},"critical":0,"max_cvss":8.8,"max_epss":0.0106,"exploited":0,"vulnerabilities":261,"url":"https://junglewise.ai/threats/technologies/macos"},{"hub":true,"top":[{"cve":"CVE-2026-86929","cvss":8.8,"slug":"cve-2026-86929-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple macOS out-of-bounds write in Accelerate Framework","severity":"high","exploited":false,"published_at":"2026-10-26T21:20:30.323+00:00","url":"https://junglewise.ai/threats/cve-2026-86929-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"},{"cve":"CVE-2026-64759","cvss":8.8,"slug":"cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation","title":"Apple iOS integer overflow in image processing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:33.897+00:00","url":"https://junglewise.ai/threats/cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation"},{"cve":"CVE-2026-113947","cvss":8.8,"slug":"cve-2026-113947-this-issue-was-addressed-with-improved-access-restrictions-this","title":"macOS Golden Gate archive parsing arbitrary code execution","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:11.1+00:00","url":"https://junglewise.ai/threats/cve-2026-113947-this-issue-was-addressed-with-improved-access-restrictions-this"}],"high":12,"name":"Apple macOS Golden Gate","rank":19,"slug":"macos-golden-gate","score":298,"vendor":{"hub":true,"name":"Apple","slug":"apple"},"critical":0,"max_cvss":8.8,"max_epss":0.002,"exploited":0,"vulnerabilities":274,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"hub":true,"top":[{"cve":"CVE-2026-109755","cvss":9.6,"epss":0.0034,"slug":"cve-2026-109755-sandbox-escape-in-the-dom-content-processes-component-this","title":"Mozilla Firefox sandbox escape in DOM Content Processes","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:26.417+00:00","url":"https://junglewise.ai/threats/cve-2026-109755-sandbox-escape-in-the-dom-content-processes-component-this"},{"cve":"CVE-2026-109708","cvss":9.6,"epss":0.0032,"slug":"cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the","title":"Firefox sandbox escape due to incorrect boundary conditions in Networking","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.91+00:00","url":"https://junglewise.ai/threats/cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the"},{"cve":"CVE-2026-109707","cvss":9.6,"epss":0.0031,"slug":"cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component","title":"Firefox sandbox escape in Networking component use-after-free","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.803+00:00","url":"https://junglewise.ai/threats/cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component"}],"high":10,"name":"Mozilla Firefox","rank":20,"slug":"firefox","score":287,"vendor":{"hub":true,"name":"Mozilla","slug":"mozilla"},"critical":4,"max_cvss":9.6,"max_epss":0.0037,"exploited":0,"vulnerabilities":247,"url":"https://junglewise.ai/threats/technologies/firefox"},{"hub":true,"top":[{"cve":"CVE-2026-109708","cvss":9.6,"epss":0.0032,"slug":"cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the","title":"Firefox sandbox escape due to incorrect boundary conditions in Networking","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.91+00:00","url":"https://junglewise.ai/threats/cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the"},{"cve":"CVE-2026-109707","cvss":9.6,"epss":0.0031,"slug":"cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component","title":"Firefox sandbox escape in Networking component use-after-free","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.803+00:00","url":"https://junglewise.ai/threats/cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component"},{"cve":"CVE-2026-109705","cvss":9.6,"epss":0.0031,"slug":"cve-2026-109705-sandbox-escape-site-isolation-issue-due-to-incorrect-boundary","title":"Mozilla Firefox sandbox escape in Networking with use-after-free","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.587+00:00","url":"https://junglewise.ai/threats/cve-2026-109705-sandbox-escape-site-isolation-issue-due-to-incorrect-boundary"}],"high":9,"name":"Mozilla Firefox ESR","rank":21,"slug":"firefox-esr","score":240,"vendor":{"hub":true,"name":"Mozilla","slug":"mozilla"},"critical":3,"max_cvss":9.6,"max_epss":0.0037,"exploited":0,"vulnerabilities":207,"url":"https://junglewise.ai/threats/technologies/firefox-esr"},{"hub":true,"top":[{"cve":"CVE-2026-64759","cvss":8.8,"slug":"cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation","title":"Apple iOS integer overflow in image processing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:33.897+00:00","url":"https://junglewise.ai/threats/cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation"},{"cve":"CVE-2026-112688","cvss":8.8,"slug":"cve-2026-112688-a-memory-corruption-issue-was-addressed-with-improved-memory","title":"Apple iOS and iPadOS memory corruption in file parsing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:03.177+00:00","url":"https://junglewise.ai/threats/cve-2026-112688-a-memory-corruption-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-112659","cvss":8.8,"slug":"cve-2026-112659-a-type-confusion-issue-was-addressed-with-improved-memory","title":"Apple Safari type confusion in memory handling","severity":"high","exploited":false,"published_at":"2026-10-26T21:17:59.497+00:00","url":"https://junglewise.ai/threats/cve-2026-112659-a-type-confusion-issue-was-addressed-with-improved-memory"}],"high":9,"name":"Apple iPadOS","rank":22,"slug":"ipados","score":214,"vendor":{"hub":true,"name":"Apple","slug":"apple"},"critical":0,"max_cvss":8.8,"max_epss":null,"exploited":0,"vulnerabilities":196,"url":"https://junglewise.ai/threats/technologies/ipados"},{"hub":true,"top":[{"cve":"CVE-2026-64759","cvss":8.8,"slug":"cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation","title":"Apple iOS integer overflow in image processing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:33.897+00:00","url":"https://junglewise.ai/threats/cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation"},{"cve":"CVE-2026-112688","cvss":8.8,"slug":"cve-2026-112688-a-memory-corruption-issue-was-addressed-with-improved-memory","title":"Apple iOS and iPadOS memory corruption in file parsing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:03.177+00:00","url":"https://junglewise.ai/threats/cve-2026-112688-a-memory-corruption-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-112659","cvss":8.8,"slug":"cve-2026-112659-a-type-confusion-issue-was-addressed-with-improved-memory","title":"Apple Safari type confusion in memory handling","severity":"high","exploited":false,"published_at":"2026-10-26T21:17:59.497+00:00","url":"https://junglewise.ai/threats/cve-2026-112659-a-type-confusion-issue-was-addressed-with-improved-memory"}],"high":9,"name":"Apple Ios","rank":23,"slug":"apple-ios","score":213,"vendor":{"hub":true,"name":"Apple","slug":"apple"},"critical":0,"max_cvss":8.8,"max_epss":null,"exploited":0,"vulnerabilities":195,"url":"https://junglewise.ai/threats/technologies/apple-ios"},{"hub":true,"top":[{"cve":"CVE-2026-9869","cvss":9.1,"slug":"cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"TOTOLINK X2000R stack-based buffer overflow in formTR069Config","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:23.143+00:00","url":"https://junglewise.ai/threats/cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9827","cvss":9.1,"slug":"cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa","title":"Totolink X2000R arbitrary file write in boa formUploadFile","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:23.02+00:00","url":"https://junglewise.ai/threats/cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9817","cvss":9.1,"slug":"cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"Totolink X2000R stack-based buffer overflow in boa formUploadFile","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.9+00:00","url":"https://junglewise.ai/threats/cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"}],"high":0,"name":"TOTOLINK X2000r","rank":24,"slug":"x2000r","score":180,"vendor":{"hub":true,"name":"TOTOLINK","slug":"totolink"},"critical":30,"max_cvss":9.1,"max_epss":null,"exploited":0,"vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/x2000r"},{"hub":true,"top":[{"cve":"CVE-2026-111497","cvss":4,"epss":0.5548,"slug":"cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec","title":"Google Brotli buffer overflow in decoder","severity":"critical","exploited":true,"published_at":"2026-10-22T14:17:37.19+00:00","url":"https://junglewise.ai/threats/cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec"},{"cve":"CVE-2026-109618","epss":0.9998,"slug":"cve-2026-109618-gcp-2026-070","title":"PHP Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.357+00:00","url":"https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070"},{"cve":"CVE-2026-103956","cvss":10,"epss":0.0047,"slug":"cve-2026-103956-and-issues-in-loom-for-aws","title":"Loom for AWS authentication bypass and credential disclosure","severity":"critical","exploited":false,"published_at":"2026-10-02T19:16:39.75+00:00","url":"https://junglewise.ai/threats/cve-2026-103956-and-issues-in-loom-for-aws"}],"high":32,"name":"Amazon AWS","rank":25,"slug":"aws","score":170,"vendor":{"hub":true,"name":"Amazon","slug":"amazon"},"critical":9,"max_cvss":10,"max_epss":0.9998,"exploited":2,"vulnerabilities":41,"url":"https://junglewise.ai/threats/technologies/aws"}],"previous":{"key":"2026-09","top":"Linux Kernel","period":{"end":"2026-09-30","start":"2026-09-01"},"totals":{"high":5770,"tracked":60884,"critical":1326,"exploited":28,"technologies":6060,"vulnerabilities":15322},"url":"https://junglewise.ai/threats/monthly/2026-09"},"next":null}