# Most vulnerable technologies in October 2026

Source: https://junglewise.ai/threats/monthly/2026-10  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 November 2026, 00:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/monthly/2026-10.json  
License: CC BY 4.0 with a link back

In October 2026, Junglewise Threat Intelligence recorded 16,643 new vulnerabilities: 1,051 critical, 4,731 high and 24 exploited in the wild. The most vulnerable technology was Microsoft Windows, with 677 vulnerabilities (21 critical, 1 exploited in the wild), followed by Linux Kernel (1,041) and Google Chrome (732).

## Ranking

| # | Technology | Vulns | Critical | High | Exploited | Max CVSS |
| --- | --- | --- | --- | --- | --- | --- |
| 1 | [Microsoft Windows](https://junglewise.ai/threats/technologies/windows) (Microsoft) | 677 | 21 | 504 | 1 | 9.8 |
| 2 | [Linux Kernel](https://junglewise.ai/threats/technologies/kernel) (Linux) | 1041 | 0 | 8 | 0 | 8.8 |
| 3 | [Google Chrome](https://junglewise.ai/threats/technologies/chrome) (Google) | 732 | 9 | 34 | 0 | 9.6 |
| 4 | [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025) (Microsoft) | 298 | 18 | 195 | 1 | 9.8 |
| 5 | [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2) (Microsoft) | 260 | 11 | 182 | 1 | 9.8 |
| 6 | [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2) (Microsoft) | 260 | 11 | 182 | 1 | 9.8 |
| 7 | [Microsoft Windows 11 26h2](https://junglewise.ai/threats/technologies/windows-11-26h2) (Microsoft) | 256 | 11 | 179 | 1 | 9.8 |
| 8 | [Microsoft Windows 11 26h1](https://junglewise.ai/threats/technologies/windows-11-26h1) (Microsoft) | 254 | 11 | 175 | 1 | 9.8 |
| 9 | [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022) (Microsoft) | 246 | 18 | 152 | 1 | 9.8 |
| 10 | [Microsoft Windows 11 23h2](https://junglewise.ai/threats/technologies/windows-11-23h2) (Microsoft) | 219 | 11 | 151 | 1 | 9.8 |
| 11 | [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019) (Microsoft) | 217 | 16 | 130 | 1 | 9.8 |
| 12 | [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809) (Microsoft) | 200 | 15 | 124 | 1 | 9.8 |
| 13 | [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016) (Microsoft) | 187 | 13 | 108 | 1 | 9.8 |
| 14 | [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2) (Microsoft) | 172 | 9 | 114 | 1 | 9.8 |
| 15 | [Microsoft Windows 10 1607](https://junglewise.ai/threats/technologies/windows-10-1607) (Microsoft) | 173 | 13 | 102 | 1 | 9.8 |
| 16 | [Microsoft Windows 10 22h2](https://junglewise.ai/threats/technologies/windows-10-22h2) (Microsoft) | 171 | 9 | 113 | 1 | 9.8 |
| 17 | [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012) (Microsoft) | 170 | 13 | 94 | 1 | 9.8 |
| 18 | [Apple macOS](https://junglewise.ai/threats/technologies/macos) (Apple) | 261 | 0 | 22 | 0 | 8.8 |
| 19 | [Apple macOS Golden Gate](https://junglewise.ai/threats/technologies/macos-golden-gate) (Apple) | 274 | 0 | 12 | 0 | 8.8 |
| 20 | [Mozilla Firefox](https://junglewise.ai/threats/technologies/firefox) (Mozilla) | 247 | 4 | 10 | 0 | 9.6 |
| 21 | [Mozilla Firefox ESR](https://junglewise.ai/threats/technologies/firefox-esr) (Mozilla) | 207 | 3 | 9 | 0 | 9.6 |
| 22 | [Apple iPadOS](https://junglewise.ai/threats/technologies/ipados) (Apple) | 196 | 0 | 9 | 0 | 8.8 |
| 23 | [Apple Ios](https://junglewise.ai/threats/technologies/apple-ios) (Apple) | 195 | 0 | 9 | 0 | 8.8 |
| 24 | [TOTOLINK X2000r](https://junglewise.ai/threats/technologies/x2000r) (TOTOLINK) | 30 | 30 | 0 | 0 | 9.1 |
| 25 | [Amazon AWS](https://junglewise.ai/threats/technologies/aws) (Amazon) | 41 | 9 | 32 | 2 | 10 |

## Most affected vendors

1. [Microsoft](https://junglewise.ai/threats/vendors/microsoft): 1,323 vulnerabilities, 62 critical, 1 exploited
2. [Oracle](https://junglewise.ai/threats/vendors/oracle): 988 vulnerabilities, 66 critical, 0 exploited
3. [Linux](https://junglewise.ai/threats/vendors/linux): 971 vulnerabilities, 0 critical, 0 exploited
4. [Google](https://junglewise.ai/threats/vendors/google): 792 vulnerabilities, 13 critical, 2 exploited
5. [IBM](https://junglewise.ai/threats/vendors/ibm): 240 vulnerabilities, 29 critical, 0 exploited
6. [Adobe](https://junglewise.ai/threats/vendors/adobe): 171 vulnerabilities, 31 critical, 0 exploited
7. [Apache](https://junglewise.ai/threats/vendors/apache): 334 vulnerabilities, 15 critical, 0 exploited
8. [Apple](https://junglewise.ai/threats/vendors/apple): 392 vulnerabilities, 0 critical, 0 exploited
9. [Mozilla](https://junglewise.ai/threats/vendors/mozilla): 270 vulnerabilities, 4 critical, 0 exploited
10. [Dell](https://junglewise.ai/threats/vendors/dell): 110 vulnerabilities, 14 critical, 0 exploited

## Most severe vulnerabilities

- [CVE-2026-97229: GitLab CE/EE integer overflow in CI/CD regular expression compiler](https://junglewise.ai/threats/cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all) (critical, exploited in the wild, CVSS 10, published 13 Oct 2026)
- [CVE-2026-105134: Ahsay AhsayCBS OS command injection in UpdateReceivers](https://junglewise.ai/threats/cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this) (critical, exploited in the wild, CVSS 10, published 4 Oct 2026)
- [CVE-2026-114625: Arista VeloCloud Orchestrator privilege escalation](https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where) (critical, exploited in the wild, CVSS 9.9, published 22 Oct 2026)
- [CVE-2026-104286: Fortinet FortiMail path traversal vulnerability](https://junglewise.ai/threats/cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 1 Oct 2026)
- [CVE-2026-102764: BeyondTrust Remote Support authentication bypass by spoofing](https://junglewise.ai/threats/cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing) (critical, exploited in the wild, CVSS 9.8, published 15 Oct 2026)
- [CVE-2026-96951: Microsoft Windows command injection in Shell](https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 13 Oct 2026)
- [CVE-2026-104935: Ivanti Connect Secure authentication bypass by spoofing](https://junglewise.ai/threats/cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing) (critical, exploited in the wild, CVSS 8.6, published 13 Oct 2026)
- [CVE-2026-76418: Cisco Secure Firewall ASA and FTD SSL VPN denial of service](https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco) (critical, exploited in the wild, CVSS 8.6, published 28 Oct 2026)
- [CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS command injection](https://junglewise.ai/threats/cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection) (critical, exploited in the wild, CVSS 7.8, published 14 Oct 2026)
- [CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability](https://junglewise.ai/threats/cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog) (critical, exploited in the wild, CVSS 7.5, published 4 Oct 2026)

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies in October 2026", https://junglewise.ai/threats/monthly/2026-10, 2 November 2026.