Vendor
Unknown vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 118 vulnerabilities in Unknown: 6 in the last 7 days and 70 in the last 90 days, 9 of them critical and 0 exploited in the wild. The most recent, CVE-2026-81384, was published on 10 November 2026. 26 vulnerabilities in the last four weeks, down 21% on the four before (33). 3 critical against 2. 2 technologies have a page of their own.
- Last 7 days
- 6
- Last 90 days
- 70
- Critical, all time
- 9
- Exploited in the wild
- 0
About Unknown
A placeholder designation used when the specific vendor of a product has not been identified.
Unknown technologies
Latest Unknown vulnerabilities
- CVE-2026-81384: DNS Server heap buffer overflow allows remote code executionhighCVSS 8.1
- CVE-2026-99285: Linux kernel netfilter nft_byteorder multi-register bypassinfo
- CVE-2026-97872: Java EJB authentication bypass over Hessian protocolinfo
- CVE-2026-87755: Enterprise Java Beans session identifier weak randomnessinfo
- gabby-types-sec malicious code in Rust crateinfo
- top_level_crate malicious code with telemetry exfiltrationinfo
- CVE-2026-99257: Linux kernel GPIO null pointer dereference in shared GPIO lookupinfo
- CVE-2025-5769: Authentication endpoint stored cross-site scriptingmediumCVSS 6.1
- CVE-2026-99241: Linux kernel NTFS race condition in page fault handlerinfo
- CVE-2024-2372: Open redirection vulnerability in URL handlingmediumCVSS 5.4
- CVE-2026-62012: Coinpress PHP Object InjectioncriticalCVSS 9.8
- CVE-2026-116867: Dynamic QR Code Generator PHP object injectionhighCVSS 8.8
- CVE-2026-99146: Linux kernel i915 DMC firmware load address validation bypassinfo
- CVE-2026-99098: Linux kernel dm-integrity buffer overflow in inline modeinfo
- CVE-2026-116097: CloudClassroom-PHP-Project stored XSS in addnewstudent.phpmediumCVSS 4.3
- CVE-2026-99047: Linux kernel GVE XSK buffer memory leak when stopping ringsinfo
- CVE-2026-99034: Linux kernel sdhci-sprd runtime PM cleanup on removeinfo
- CVE-2026-99020: Linux kernel tps6594-regulator array bounds read in BUCK2-4info
- CVE-2026-98876: Linux kernel host1x bus NULL pointer dereference in error teardowninfo
- CVE-2026-98874: Linux kernel iwlwifi driver incorrect WARN_ON in WoWLAN suspendinfo
- CVE-2026-79847: <UNKNOWN>criticalCVSS 10
- CVE-2026-98722: Linux kernel block2mtd divide-by-zero on zero erase_sizeinfo
- CVE-2026-98678: Linux kernel ad4030 ADC input validation bypassinfo
- CVE-2026-98674: Linux kernel adi-axi-adc uninitialized mutex in state accessinfo
- CVE-2026-98633: Linux kernel Bluetooth btnxpuart memory leak in firmware dumpinfo
Most severe Unknown vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-79847: <UNKNOWN>criticalCVSS 10
- CVE-1999-0192: Multiple Vendors telnetd buffer overflow in tgetent via TERMCAPcriticalCVSS 10
- CVE-1999-0082: ftpd unauthorized root access via CWD ~root commandcriticalCVSS 10
- CVE-2026-74001: User Registration & Membership Pro authentication bypasscriticalCVSS 9.8EPSS 0.6%
- CVE-2026-86707: WordPress Private Feed Key authentication bypasscriticalCVSS 9.8EPSS 0.5%
- CVE-2026-62012: Coinpress PHP Object InjectioncriticalCVSS 9.8
- CVE-2026-49104: WordPress Integration for Keap/Infusionsoft PHP Object InjectioncriticalCVSS 9.8
- CVE-2026-99999: Linux kernel memory corruption in virtio-net/TAPcriticalCVSS 9.3EPSS 0.2%
- CVE-2026-96822: Books Gallery SQL injection vulnerabilitycriticalCVSS 9.3
- CVE-2026-87764: BuddyPress Instant Chat stored XSS in chat messageshighCVSS 8.8EPSS 0.3%
Vulnerabilities per week
26 vulnerabilities in the last four weeks, down 21% on the four before (33). 3 critical against 2. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 1 | 1 | |
| 24 Aug 2026 | 1 | 0 | |
| 31 Aug 2026 | 1 | 0 | |
| 7 Sep 2026 | 3 | 0 | |
| 14 Sep 2026 | 3 | 1 | |
| 21 Sep 2026 | 13 | 0 | |
| 28 Sep 2026 | 5 | 1 | |
| 5 Oct 2026 | 12 | 0 | |
| 12 Oct 2026 | 10 | 1 | |
| 19 Oct 2026 | 6 | 1 | |
| 26 Oct 2026 | 5 | 1 | |
| 2 Nov 2026 | 5 | 0 | |
| 9 Nov 2026 | 5 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Unknown vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/unknown)<a href="https://junglewise.ai/threats/vendors/unknown"><img src="https://junglewise.ai/threats/vendors/unknown/badge.svg" alt="Unknown vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/unknown.json, and this page as text at https://junglewise.ai/threats/vendors/unknown.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Unknown vulnerabilities", https://junglewise.ai/threats/vendors/unknown, 13 November 2026.