# Most vulnerable technologies: week of 20 to 26 July 2026 (week 30)

Source: https://junglewise.ai/threats/weekly/2026-07-20  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 26 September 2026, 10:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/weekly/2026-07-20.json  
License: CC BY 4.0 with a link back

In the week of 20 to 26 July 2026, Junglewise Threat Intelligence recorded 3,115 new vulnerabilities: 345 critical, 984 high and 1 exploited in the wild. The most vulnerable technology was Oracle Coherence, with 98 vulnerabilities (62 critical), followed by Linux Kernel (255) and Oracle WebCenter Content (42).

## Ranking

| # | Technology | Vulns | Critical | High | Exploited | Max CVSS |
| --- | --- | --- | --- | --- | --- | --- |
| 1 | [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence) (Oracle) | 98 | 62 | 21 | 0 | 10 |
| 2 | [Linux Kernel](https://junglewise.ai/threats/technologies/kernel) (Linux) | 255 | 0 | 0 | 0 | 8.2 |
| 3 | [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content) (Oracle) | 42 | 6 | 36 | 0 | 10 |
| 4 | [N8n](https://junglewise.ai/threats/technologies/n8n) (N8n) | 58 | 0 | 24 | 0 | 8.9 |
| 5 | [Oracle Service Delivery Platform](https://junglewise.ai/threats/technologies/service-delivery-platform) (Oracle) | 20 | 16 | 3 | 0 | 10 |
| 6 | [Oracle WebLogic Server](https://junglewise.ai/threats/technologies/weblogic-server) (Oracle) | 23 | 11 | 12 | 0 | 9.9 |
| 7 | [SolarWinds Serv-U](https://junglewise.ai/threats/technologies/serv-u) (SolarWinds) | 15 | 14 | 0 | 0 | 9.1 |
| 8 | [Oracle Unified Directory](https://junglewise.ai/threats/technologies/unified-directory) (Oracle) | 22 | 6 | 16 | 0 | 10 |
| 9 | [Oracle WebCenter Enterprise Capture](https://junglewise.ai/threats/technologies/webcenter-enterprise-capture) (Oracle) | 14 | 11 | 3 | 0 | 9.9 |
| 10 | [Gitea](https://junglewise.ai/threats/technologies/gitea) (Gitea) | 44 | 2 | 9 | 0 | 9.6 |
| 11 | [Npm @Budibase/Server](https://junglewise.ai/threats/technologies/budibase-server) (Npm) | 30 | 3 | 11 | 0 | 9.8 |
| 12 | [Go Code.gitea.io/Gitea](https://junglewise.ai/threats/technologies/code-gitea-io-gitea) (Go) | 36 | 2 | 8 | 0 | 9.6 |
| 13 | [Mozilla Firefox](https://junglewise.ai/threats/technologies/firefox) (Mozilla) | 60 | 0 | 0 | 0 | 8.8 |
| 14 | [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search) (Oracle) | 17 | 4 | 11 | 0 | 9.9 |
| 15 | [Oracle Access Manager](https://junglewise.ai/threats/technologies/access-manager) (Oracle) | 15 | 6 | 7 | 0 | 10 |
| 16 | [Oracle Enterprise Manager Base Platform](https://junglewise.ai/threats/technologies/enterprise-manager-base-platform) (Oracle) | 23 | 2 | 12 | 0 | 9.8 |
| 17 | [Pip Praisonai-Platform](https://junglewise.ai/threats/technologies/praisonai-platform) (Pip) | 16 | 4 | 10 | 0 | 9.8 |
| 18 | [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster) (Oracle) | 43 | 0 | 4 | 0 | 8.4 |
| 19 | [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager) (Oracle) | 15 | 3 | 10 | 0 | 9.9 |
| 20 | [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server) (Oracle) | 41 | 0 | 4 | 0 | 8.4 |
| 21 | [Oracle WebCenter Content: Imaging](https://junglewise.ai/threats/technologies/webcenter-content-imaging) (Oracle) | 14 | 1 | 13 | 0 | 9.8 |
| 22 | [Oracle Platform Security for Java](https://junglewise.ai/threats/technologies/platform-security-for-java) (Oracle) | 11 | 4 | 7 | 0 | 10 |
| 23 | [FFmpeg](https://junglewise.ai/threats/technologies/ffmpeg) (Ffmpeg) | 16 | 0 | 14 | 0 | 8.8 |
| 24 | [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite) (Oracle) | 21 | 0 | 10 | 0 | 8.8 |
| 25 | [Oracle WebCenter Sites](https://junglewise.ai/threats/technologies/webcenter-sites) (Oracle) | 10 | 4 | 5 | 0 | 9.9 |

## Most affected vendors

1. [Oracle](https://junglewise.ai/threats/vendors/oracle): 1,044 vulnerabilities, 200 critical, 0 exploited
2. [Linux](https://junglewise.ai/threats/vendors/linux): 255 vulnerabilities, 0 critical, 0 exploited
3. [Npm](https://junglewise.ai/threats/vendors/npm): 91 vulnerabilities, 8 critical, 0 exploited
4. [Go](https://junglewise.ai/threats/vendors/go): 76 vulnerabilities, 4 critical, 0 exploited
5. [N8n](https://junglewise.ai/threats/vendors/n8n): 57 vulnerabilities, 0 critical, 0 exploited
6. [Pip](https://junglewise.ai/threats/vendors/pypi): 31 vulnerabilities, 6 critical, 0 exploited
7. [SolarWinds](https://junglewise.ai/threats/vendors/solarwinds): 15 vulnerabilities, 14 critical, 0 exploited
8. [Microsoft](https://junglewise.ai/threats/vendors/microsoft): 20 vulnerabilities, 11 critical, 0 exploited
9. [Gitea](https://junglewise.ai/threats/vendors/gitea): 44 vulnerabilities, 2 critical, 0 exploited
10. [Mozilla](https://junglewise.ai/threats/vendors/mozilla): 65 vulnerabilities, 0 critical, 0 exploited

## Most severe vulnerabilities

- [CVE-2026-16232: Check Point SmartConsole authentication bypass in login process](https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process) (critical, exploited in the wild, CVSS 9.8, published 22 Jul 2026)
- [CVE-2026-47668: DbGate remote code execution in JSON script runner](https://junglewise.ai/threats/cve-2026-47668-dbgate-remote-code-execution-in-json-script-runner) (critical, CVSS 10, published 23 Jul 2026)
- [CVE-2026-46412: BeProduct @beproduct/nestjs-auth malicious code injection via npm supply chain attack](https://junglewise.ai/threats/cve-2026-46412-beproduct-beproduct-nestjs-auth-malicious-code-injection-via-npm) (critical, CVSS 10, published 20 Jul 2026)
- [CVE-2026-66012: SiYuan missing authorization in MCP kernel endpoint](https://junglewise.ai/threats/cve-2026-66012-siyuan-missing-authorization-in-mcp-kernel-endpoint) (critical, CVSS 10, published 25 Jul 2026)
- [Pheditor authentication bypass in forced password-change flow](https://junglewise.ai/threats/pheditor-authentication-bypass-in-forced-password-change-flow-b0aed4a4) (critical, CVSS 10, published 24 Jul 2026)
- [Microsoft Prompty SSTI to RCE in Nunjucks Renderer](https://junglewise.ai/threats/cve-2026-73299-microsoft-prompty-server-side-template-injection-to-rce-in) (critical, CVSS 10, published 24 Jul 2026)
- [CVE-2026-58630: Microsoft Azure App Service privilege escalation](https://junglewise.ai/threats/cve-2026-58630-microsoft-azure-app-service-privilege-escalation) (critical, CVSS 10, published 24 Jul 2026)
- [CVE-2026-57106: Microsoft Purview Data Governance SSRF in Data Quality](https://junglewise.ai/threats/cve-2026-57106-microsoft-purview-data-governance-ssrf-in-data-quality) (critical, CVSS 10, published 24 Jul 2026)
- [CVE-2026-56163: Microsoft Azure Kubernetes Service missing authentication privilege escalation](https://junglewise.ai/threats/cve-2026-56163-microsoft-azure-kubernetes-service-missing-authentication) (critical, CVSS 10, published 24 Jul 2026)
- [CVE-2026-62825: Microsoft Azure Key Vault improper authentication privilege escalation](https://junglewise.ai/threats/cve-2026-62825-microsoft-azure-key-vault-improper-authentication-privilege) (critical, CVSS 10, published 24 Jul 2026)

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies: week of 20 to 26 July 2026 (week 30)", https://junglewise.ai/threats/weekly/2026-07-20, 26 September 2026.