Threat intelligence · updated hourly
Most vulnerable technologies, 7 to 13 November 2026
Updated . Rebuilt every hour.
In the 7 days from 7 November 2026 to 13 November 2026, Junglewise Threat Intelligence recorded 4,518 new vulnerabilities: 223 critical, 1,770 high and 3 exploited in the wild. The most vulnerable technology was Microsoft Windows, with 422 vulnerabilities (8 critical), followed by IBM API Connect (205) and Microsoft Office Word (58).
- New vulnerabilities
- 4,518
- Critical
- 223
- Exploited in the wild
- 3
- Technologies affected
- 1,799
Ranking
Most affected vendors
- 1.Microsoft1,087 vulnerabilities, 26 critical, 1 exploited
- 2.IBM285 vulnerabilities, 54 critical, 1 exploited
- 3.Fortinet97 vulnerabilities, 18 critical, 0 exploited
- 4.Adobe107 vulnerabilities, 21 critical, 0 exploited
- 5.Google251 vulnerabilities, 1 critical, 1 exploited
- 6.Ffmpeg92 vulnerabilities, 0 critical, 0 exploited
- 7.PostgreSQL49 vulnerabilities, 0 critical, 0 exploited
- 8.SAP40 vulnerabilities, 9 critical, 0 exploited
- 9.Mozilla108 vulnerabilities, 0 critical, 0 exploited
- 10.OpenEMR42 vulnerabilities, 4 critical, 0 exploited
Most severe vulnerabilities
- CVE-2026-123218: IBM Aspera Faspex authorization bypasscriticalexploited in the wildCVSS 9.8EPSS 0.4%
- CVE-2026-124194: Microsoft Office Outlook user warning spoofing vulnerabilitycriticalexploited in the wildCVSS 6.5
- CVE-2026-125350: Google Chrome use after free in XMLcriticalexploited in the wild
- CVE-2026-127277: Linksys EA8100 SMB service improper initializationcriticalCVSS 10
- CVE-2026-127275: Linksys EA8100 authentication bypass in JNAP APIcriticalCVSS 10
- CVE-2026-78287: STAGGS WordPress plugin code injection in file uploadcriticalCVSS 10
- CVE-2026-121889: Adobe Connect server-side request forgery privilege escalationcriticalCVSS 10
- CVE-2026-121356: Adobe Connect multiple critical vulnerabilitiescriticalCVSS 10
- CVE-2026-121353: Adobe Connect CRLF injectioncriticalCVSS 10
- CVE-2026-121352: Adobe Connect incorrect authorization privilege escalationcriticalCVSS 10
Technologies with the most tracked vulnerabilities
All time. Every vendor, and every technology of theirs with a page, is under vendors.
- Linux Kernel8,777
- Google Chrome3,930
- Microsoft Windows2,362
- Apple macOS1,496
- Mozilla Firefox869
- Openclaw849
- Apple iPadOS739
- Mozilla Firefox ESR642
- Google Android628
- Microsoft Windows 10589
- Microsoft Windows 11 24h2565
- Microsoft Windows 11 25h2534
- Microsoft Windows Server 2025534
- Microsoft Windows Server 2022528
- Microsoft Windows Server 2019521
- Microsoft Windows Server 2012517
- Microsoft Windows 11494
- Microsoft Windows Server 2016476
- Apple visionOS457
- Apple macOS Golden Gate449
- tensorflow (PyPI)435
- moodle/moodle (Packagist)434
- tensorflow-cpu (PyPI)430
- tensorflow-gpu (PyPI)427
- Mozilla Thunderbird396
- Apple watchOS386
- Microsoft Windows 10 1809380
- Microsoft Windows 10 21h2373
- Microsoft Windows 10 22h2372
- Microsoft Windows 11 23h2365
- Microsoft Windows 11 26h1364
- magento/community-edition (Packagist)362
- Apple tvOS353
- Microsoft Windows 10 1607312
- github.com/mattermost/mattermost-server (Go)297
- org.jenkins-ci.main:jenkins-core (Maven)259
- Microsoft Windows 11 26h2259
- WWBN AVideo250
- Microsoft.ChakraCore (NuGet)247
- N8n243
- github.com/mattermost/mattermost-server/v6 (Go)222
- openclaw (npm)214
- IBM API Connect207
- github.com/mattermost/mattermost/server/v8 (Go)207
- Apple Ios206
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP204
- Apple Iphone Os203
- github.com/mattermost/mattermost-server/v5 (Go)199
- Amazon AWS198
- Apple Safari189
- Microsoft Edge187
- typo3/cms (Packagist)187
- IBM AIX181
- stdlib (Go)178
- SiYuan178
- Gitea177
- open-webui (PyPI)177
- Django (PyPI)173
- org.apache.tomcat:tomcat (Maven)169
- Magick.NET-Q16-AnyCPU (NuGet)167
- wwbn/avideo (Packagist)164
- Oracle MySQL Server163
- Magick.NET-Q16-HDRI-AnyCPU (NuGet)162
- Magick.NET-Q8-AnyCPU (NuGet)162
- magento/project-community-edition (Packagist)161
- github.com/siyuan-note/siyuan/kernel (Go)160
- Magick.NET-Q16-HDRI-x86 (NuGet)160
- Magick.NET-Q8-x86 (NuGet)160
- apache-airflow (PyPI)159
- com.liferay.portal:release.portal.bom (Maven)159
- Magick.NET-Q16-x86 (NuGet)159
- Magick.NET-Q16-arm64 (NuGet)157
- Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet)157
- Magick.NET-Q16-HDRI-x64 (NuGet)157
- Magick.NET-Q16-OpenMP-arm64 (NuGet)157
- Magick.NET-Q16-OpenMP-x64 (NuGet)157
- Magick.NET-Q8-arm64 (NuGet)157
- Magick.NET-Q16-HDRI-arm64 (NuGet)156
- Magick.NET-Q8-OpenMP-arm64 (NuGet)156
- Magick.NET-Q8-OpenMP-x64 (NuGet)156
- IBM Langflow154
- Magick.NET-Q16-x64 (NuGet)153
- FreeRDP151
- Magick.NET-Q8-x64 (NuGet)151
- drupal/core (Packagist)150
- FFmpeg148
- GitLab Enterprise Edition148
- Red Hat Enterprise Linux 9146
- pimcore/pimcore (Packagist)145
- craftcms/cms (Packagist)143
- ImageMagick143
- Oracle Hyperion Financial Management142
- Red Hat Enterprise Linux 10140
- Microsoft SQL Server140
- Microsoft Windows 11 Version 26H1135
- Microsoft Office134
- flowise (npm)133
- Red Hat Enterprise Linux 8132
- Microsoft Office Word132
- Oracle Helidon130
- Oracle MySQL Cluster129
- dolibarr/dolibarr (Packagist)127
- getgrav/grav (Packagist)127
- typo3/cms-core (Packagist)127
- code.gitea.io/gitea (Go)126
- com.liferay.portal:release.dxp.bom (Maven)125
- pillow (PyPI)125
- Microsoft Windows Server 2022, 23H2125
- concrete5/concrete5 (Packagist)122
- org.keycloak:keycloak-services (Maven)122
- IBM i120
- praisonai (PyPI)120
- JeecgBoot119
- thorsten/phpmyfaq (Packagist)119
- parse-server (npm)117
- vllm (PyPI)117
- Microsoft Windows Server 2008116
- Microsoft Office Excel115
- Oracle Coherence113
- Mattermost Server111
- vm2 (npm)111
- Oracle E-Business Suite110
- Oracle WebCenter Content110
- Concrete CMS108
- librenms/librenms (Packagist)107
- phpmyadmin/phpmyadmin (Packagist)107
- microweber/microweber (Packagist)106
- Oracle Commerce Guided Search104
- vLLM Project vLLM103
- Oracle Commerce Experience Manager102
- Red Hat Keycloak102
- symfony/symfony (Packagist)102
- Linux kernel102
- Oracle JD Edwards EnterpriseOne Tools101
- Oracle PeopleSoft Enterprise PeopleTools101
- plone (PyPI)101
- Frappe ERPNext100
- Microsoft Windows 7100
- Microsoft Windows 8.1100
- GitLab Community Edition97
- Huawei HarmonyOS97
- Langflow96
- Magick.NET-Q16-HDRI-OpenMP-x64 (NuGet)96
- Apache Airflow95
- Adobe ColdFusion95
- Zephyr Project Zephyr95
- IBM Guardium Data Protection93
- Elastic Kibana93
- silverstripe/framework (Packagist)93
- Snipeitapp Snipe-It93
- Oracle Java SE92
- Hpe Networking Fabric Composer92
- code.vikunja.io/api (Go)91
- Vikunja91
- FreeBSD89
- mlflow (PyPI)88
- Apache Camel87
- Apache Tomcat87
- com.fasterxml.jackson.core:jackson-databind (Maven)86
- MongoDB Server86
- picklescan (PyPI)86
- Mozilla Thunderbird-Esr86
- Oracle VirtualBox86
- exiv2 (PyPI)85
- Open5GS85
- Microsoft 365 Apps for Enterprise84
- Capgo84
- Vercel Next.js83
- org.apache.tomcat.embed:tomcat-embed-core (Maven)83
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP83
- surrealdb (crates.io)83
- Jetbrains YouTrack83
- nltk (PyPI)82
- Microsoft Office LTSC 202182
- Microsoft Office LTSC 202482
- gogs.io/gogs (Go)81
- snipe/snipe-it (Packagist)81
- Microsoft Office 201980
- OpenSSL80
- Google Chrome for iOS79
- drupal/drupal (Packagist)79
- Oracle Siebel CRM79
- Siemens SIMATIC CN 410079
- github.com/traefik/traefik/v2 (Go)78
- actionpack (RubyGems)77
- electron (npm)77
- Apple Multiple Products77
- Apache Thrift77
- ansible (PyPI)76
- Watchguard Fireware OS76
- github.com/traefik/traefik (Go)75
- github.com/usememos/memos (Go)75
- Adobe Experience Manager74
- ghost (npm)74
- NVIDIA GPU Display Driver74
- mantisbt/mantisbt (Packagist)74
- Microsoft Office SharePoint74
- Arista EOS73
- IBM PowerVM VIOS73
- Microsoft Windows Installer73
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
Technologies are ranked by a score: 10 points for each vulnerability exploited in the wild, 5 for each critical, 2 for each high and 1 for every vulnerability. A vulnerability counts once for every technology it affects, so one advisory can appear under several products.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies.json, and this page as text at https://junglewise.ai/threats/technologies.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies, 7 to 13 November 2026", https://junglewise.ai/threats/technologies, 13 November 2026.