# Most vulnerable technologies: week of 10 to 16 August 2026 (week 33)

Source: https://junglewise.ai/threats/weekly/2026-08-10  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 26 September 2026, 09:24 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/weekly/2026-08-10.json  
License: CC BY 4.0 with a link back

In the week of 10 to 16 August 2026, Junglewise Threat Intelligence recorded 1,900 new vulnerabilities: 222 critical, 789 high and 6 exploited in the wild. The most vulnerable technology was Linux Kernel, with 546 vulnerabilities (82 critical), followed by SiYuan (37) and IBM i (37).

## Ranking

| # | Technology | Vulns | Critical | High | Exploited | Max CVSS |
| --- | --- | --- | --- | --- | --- | --- |
| 1 | [Linux Kernel](https://junglewise.ai/threats/technologies/kernel) (Linux) | 546 | 82 | 240 | 0 | 10 |
| 2 | [SiYuan](https://junglewise.ai/threats/technologies/siyuan) (SiYuan) | 37 | 7 | 12 | 0 | 10 |
| 3 | [IBM i](https://junglewise.ai/threats/technologies/i) (IBM) | 37 | 0 | 25 | 0 | 8.9 |
| 4 | [Microsoft Windows](https://junglewise.ai/threats/technologies/windows-) (Microsoft) | 29 | 1 | 23 | 0 | 9.1 |
| 5 | [Microsoft Office](https://junglewise.ai/threats/technologies/office) (Microsoft) | 24 | 0 | 19 | 0 | 8.4 |
| 6 | [Microsoft Office Excel](https://junglewise.ai/threats/technologies/office-excel) (Microsoft) | 23 | 0 | 18 | 0 | 8.8 |
| 7 | [IBM Db2 Mirror For I](https://junglewise.ai/threats/technologies/db2-mirror-for-i) (IBM) | 18 | 4 | 8 | 0 | 9.9 |
| 8 | [Intel Killer Wi-Fi 6 Ax1650i\/S](https://junglewise.ai/threats/technologies/killer-wi-fi-6-ax1650i-s) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 9 | [Intel Killer Wi-Fi 6e Ax1675i\/S](https://junglewise.ai/threats/technologies/killer-wi-fi-6e-ax1675i-s) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 10 | [Intel Killer Wi-Fi 6e Ax1675x\/W](https://junglewise.ai/threats/technologies/killer-wi-fi-6e-ax1675x-w) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 11 | [Intel Killer Wi-Fi 7 Be1750i\/S](https://junglewise.ai/threats/technologies/killer-wi-fi-7-be1750i-s) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 12 | [Intel Killer Wi-Fi 7 Be1750x\/W](https://junglewise.ai/threats/technologies/killer-wi-fi-7-be1750x-w) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 13 | [Intel Killer Wi-Fi 7 Be1775i\/S](https://junglewise.ai/threats/technologies/killer-wi-fi-7-be1775i-s) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 14 | [Intel Proset\](https://junglewise.ai/threats/technologies/proset) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 15 | [Intel Wi-Fi 6 Ax200](https://junglewise.ai/threats/technologies/wi-fi-6-ax200) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 16 | [Intel Wi-Fi 6 Ax201](https://junglewise.ai/threats/technologies/wi-fi-6-ax201) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 17 | [Intel Wi-Fi 6 Ax210](https://junglewise.ai/threats/technologies/wi-fi-6-ax210) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 18 | [Intel Wi-Fi 6e Ax211](https://junglewise.ai/threats/technologies/wi-fi-6e-ax211) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 19 | [Intel Wi-Fi 7 Be200](https://junglewise.ai/threats/technologies/wi-fi-7-be200) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 20 | [Intel Wi-Fi 7 Be201](https://junglewise.ai/threats/technologies/wi-fi-7-be201) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 21 | [Intel Wi-Fi 7 Be211](https://junglewise.ai/threats/technologies/wi-fi-7-be211) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 22 | [Intel Wi-Fi 7 Be213](https://junglewise.ai/threats/technologies/wi-fi-7-be213) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 23 | [Intel Wireless-Ac 9461](https://junglewise.ai/threats/technologies/wireless-ac-9461) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 24 | [Intel Wireless-Ac 9462](https://junglewise.ai/threats/technologies/wireless-ac-9462) (Intel) | 21 | 0 | 16 | 0 | 8.8 |
| 25 | [Intel Wireless-Ac 9560](https://junglewise.ai/threats/technologies/wireless-ac-9560) (Intel) | 21 | 0 | 16 | 0 | 8.8 |

## Most affected vendors

1. [Linux](https://junglewise.ai/threats/vendors/linux): 546 vulnerabilities, 82 critical, 0 exploited
2. [Microsoft](https://junglewise.ai/threats/vendors/microsoft): 175 vulnerabilities, 5 critical, 2 exploited
3. [IBM](https://junglewise.ai/threats/vendors/ibm): 68 vulnerabilities, 6 critical, 0 exploited
4. [Intel](https://junglewise.ai/threats/vendors/intel): 59 vulnerabilities, 0 critical, 0 exploited
5. [SiYuan](https://junglewise.ai/threats/vendors/siyuan): 35 vulnerabilities, 7 critical, 0 exploited
6. [Adobe](https://junglewise.ai/threats/vendors/adobe): 22 vulnerabilities, 4 critical, 1 exploited
7. [Apache](https://junglewise.ai/threats/vendors/apache): 26 vulnerabilities, 7 critical, 0 exploited
8. [Go](https://junglewise.ai/threats/vendors/go): 29 vulnerabilities, 3 critical, 0 exploited
9. [Npm](https://junglewise.ai/threats/vendors/npm): 36 vulnerabilities, 1 critical, 0 exploited
10. [Siemens](https://junglewise.ai/threats/vendors/siemens): 17 vulnerabilities, 1 critical, 0 exploited

## Most severe vulnerabilities

- [CVE-2026-72898: Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and…](https://junglewise.ai/threats/cve-2026-72898-metabase-sql-injection-in-password-reset-endpoint) (critical, exploited in the wild, CVSS 10, published 10 Aug 2026)
- [CVE-2026-71362: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An…](https://junglewise.ai/threats/cve-2026-71362-adobe-commerce-and-magento-incorrect-authorization) (critical, exploited in the wild, CVSS 9.1, published 11 Aug 2026)
- [CVE-2026-65660: Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to…](https://junglewise.ai/threats/cve-2026-65660-microsoft-sharepoint-code-injection) (critical, exploited in the wild, CVSS 8.8, published 11 Aug 2026)
- [CVE-2026-20349: A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software…](https://junglewise.ai/threats/cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn) (critical, exploited in the wild, CVSS 8.6, published 11 Aug 2026)
- [CVE-2026-68820: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.](https://junglewise.ai/threats/cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after) (critical, exploited in the wild, CVSS 7, published 11 Aug 2026)
- [CVE-2026-66384: An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.](https://junglewise.ai/threats/cve-2026-66384-jfrog-artifactory-path-traversal-in-docker-cache) (critical, exploited in the wild, CVSS 5.3, published 12 Aug 2026)
- [CVE-2026-19188: Haiwell IoT Cloud HMI Gateway OS command injection](https://junglewise.ai/threats/cve-2026-19188-haiwell-iot-cloud-hmi-gateway-os-command-injection) (critical, CVSS 10, published 14 Aug 2026)
- [CVE-2026-73678: MindsDB Minds Platform unauthenticated remote code execution in agent scratchpad](https://junglewise.ai/threats/cve-2026-73678-mindsdb-minds-platform-unauthenticated-remote-code-execution-in) (critical, CVSS 10, published 14 Aug 2026)
- [CVE-2026-71398: Adobe Campaign Classic authorization bypass leading to code execution](https://junglewise.ai/threats/cve-2026-71398-adobe-campaign-classic-authorization-bypass-leading-to-code) (critical, CVSS 10, published 11 Aug 2026)
- [CVE-2026-27302: Adobe Campaign Classic authorization bypass leading to code execution](https://junglewise.ai/threats/cve-2026-27302-adobe-campaign-classic-authorization-bypass-leading-to-code) (critical, CVSS 10, published 11 Aug 2026)

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies: week of 10 to 16 August 2026 (week 33)", https://junglewise.ai/threats/weekly/2026-08-10, 26 September 2026.