{"schema_version":1,"title":"Most vulnerable technologies: week of 24 to 30 August 2026 (week 35)","summary":"In the week of 24 to 30 August 2026, Junglewise Threat Intelligence recorded 2,819 new vulnerabilities: 331 critical, 968 high and 10 exploited in the wild. The most vulnerable technology was Google Chrome, with 327 vulnerabilities (44 critical), followed by Linux Kernel (249) and Pip Nltk (33).","url":"https://junglewise.ai/threats/weekly/2026-08-24","json_url":"https://junglewise.ai/threats/weekly/2026-08-24.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/weekly/2026-08-24","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"Technologies are ranked by 10 points per vulnerability exploited in the wild, 5 per critical, 2 per high and 1 per vulnerability, over vulnerabilities published in the period (UTC). A vulnerability counts for every technology it affects.","kind":"week","period":{"end":"2026-08-30","start":"2026-08-24"},"totals":{"high":968,"critical":331,"exploited":10,"technologies":1154,"vulnerabilities":2819},"notable":[{"cve":"CVE-2021-23758","cvss":9.8,"epss":0.8258,"slug":"cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data","title":"Ajax.NET Professional unsafe deserialization of untrusted data","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data"},{"cve":"CVE-2026-60004","cvss":9.8,"epss":0.2399,"slug":"cve-2026-60004-gitea-code-injection-in-diffpatch-api","title":"Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.","severity":"critical","exploited":true,"published_at":"2026-08-26T20:17:56.01+00:00","url":"https://junglewise.ai/threats/cve-2026-60004-gitea-code-injection-in-diffpatch-api"},{"cve":"CVE-2026-82329","cvss":9.8,"epss":0.1412,"slug":"cve-2026-82329-jfrog-artifactory-improper-authentication-vulnerability","title":"JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network","severity":"critical","exploited":true,"published_at":"2026-08-28T20:20:21.293+00:00","url":"https://junglewise.ai/threats/cve-2026-82329-jfrog-artifactory-improper-authentication-vulnerability"},{"cve":"CVE-2026-81578","cvss":9.8,"epss":0.0448,"slug":"cve-2026-81578-papercut-ng-mf-missing-authentication-for-critical-function","title":"An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, u","severity":"critical","exploited":true,"published_at":"2026-08-28T16:18:29.6+00:00","url":"https://junglewise.ai/threats/cve-2026-81578-papercut-ng-mf-missing-authentication-for-critical-function"},{"cve":"CVE-2026-82078","cvss":9.1,"epss":0.0384,"slug":"cve-2026-82078-papercut-ng-mf-unsafe-reflection-vulnerability","title":"An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application in","severity":"critical","exploited":true,"published_at":"2026-08-28T16:18:31.24+00:00","url":"https://junglewise.ai/threats/cve-2026-82078-papercut-ng-mf-unsafe-reflection-vulnerability"},{"cve":"CVE-2015-5287","cvss":7,"epss":0.0496,"slug":"cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack","title":"Red Hat ABRT privilege escalation via symlink attack","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack"},{"cve":"CVE-2019-1068","epss":0.5791,"slug":"cve-2019-1068-microsoft-sql-server-remote-code-execution","title":"Microsoft SQL Server remote code execution","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1068-microsoft-sql-server-remote-code-execution"},{"cve":"CVE-2023-49105","epss":0.4292,"slug":"cve-2023-49105-owncloud-improper-authentication-vulnerability","title":"ownCloud improper authentication vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-49105-owncloud-improper-authentication-vulnerability"},{"cve":"CVE-2015-3246","epss":0.088,"slug":"cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling","title":"Red Hat Libuser race condition in passwd file handling","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling"},{"cve":"CVE-2022-0995","epss":0.0879,"slug":"cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability","title":"Linux Kernel out-of-bounds write vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability"}],"vendors":[{"hub":true,"high":79,"name":"Google","rank":1,"slug":"google","critical":44,"exploited":0,"vulnerabilities":333,"url":"https://junglewise.ai/threats/vendors/google"},{"hub":true,"high":118,"name":"Linux","rank":2,"slug":"linux","critical":41,"exploited":1,"vulnerabilities":249,"url":"https://junglewise.ai/threats/vendors/linux"},{"hub":true,"high":27,"name":"Pip","rank":3,"slug":"pip","critical":10,"exploited":0,"vulnerabilities":51,"url":"https://junglewise.ai/threats/vendors/pip"},{"hub":true,"high":0,"name":"Ubiquiti","rank":4,"slug":"ubiquiti","critical":22,"exploited":0,"vulnerabilities":22,"url":"https://junglewise.ai/threats/vendors/ubiquiti"},{"hub":true,"high":35,"name":"DrayTek","rank":5,"slug":"draytek","critical":3,"exploited":0,"vulnerabilities":40,"url":"https://junglewise.ai/threats/vendors/draytek"},{"hub":true,"high":30,"name":"Adobe","rank":6,"slug":"adobe","critical":3,"exploited":0,"vulnerabilities":41,"url":"https://junglewise.ai/threats/vendors/adobe"},{"hub":true,"high":13,"name":"Microsoft","rank":7,"slug":"microsoft","critical":7,"exploited":1,"vulnerabilities":35,"url":"https://junglewise.ai/threats/vendors/microsoft"},{"hub":true,"high":13,"name":"Go","rank":8,"slug":"go","critical":5,"exploited":1,"vulnerabilities":37,"url":"https://junglewise.ai/threats/vendors/go"},{"hub":true,"high":14,"name":"Jahlives","rank":9,"slug":"jahlives","critical":4,"exploited":0,"vulnerabilities":34,"url":"https://junglewise.ai/threats/vendors/jahlives"},{"hub":true,"high":11,"name":"Apache","rank":10,"slug":"apache","critical":7,"exploited":0,"vulnerabilities":24,"url":"https://junglewise.ai/threats/vendors/apache"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"hub":true,"top":[{"cve":"CVE-2026-79152","cvss":9.8,"epss":0.0032,"slug":"cve-2026-79152-google-chrome-customtabs-authorization-bypass-on-android","title":"Google Chrome CustomTabs authorization bypass on Android","severity":"critical","exploited":false,"published_at":"2026-08-25T21:18:10.49+00:00","url":"https://junglewise.ai/threats/cve-2026-79152-google-chrome-customtabs-authorization-bypass-on-android"},{"cve":"CVE-2026-79090","cvss":9.8,"epss":0.0042,"slug":"cve-2026-79090-google-chrome-improper-privilege-management-in-actor","title":"Google Chrome improper privilege management in Actor","severity":"critical","exploited":false,"published_at":"2026-08-25T21:18:04.65+00:00","url":"https://junglewise.ai/threats/cve-2026-79090-google-chrome-improper-privilege-management-in-actor"},{"cve":"CVE-2026-79290","cvss":9.6,"epss":0.0046,"slug":"cve-2026-79290-google-chrome-use-after-free-in-aura","title":"Google Chrome use after free in Aura","severity":"critical","exploited":false,"published_at":"2026-08-25T21:18:23.197+00:00","url":"https://junglewise.ai/threats/cve-2026-79290-google-chrome-use-after-free-in-aura"}],"high":77,"name":"Google Chrome","rank":1,"slug":"chrome","score":701,"vendor":{"name":"Google","slug":"google"},"critical":44,"max_cvss":9.8,"max_epss":0.0057,"exploited":0,"vulnerabilities":327,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":true,"top":[{"cve":"CVE-2022-0995","epss":0.0879,"slug":"cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability","title":"Linux Kernel out-of-bounds write vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability"},{"cve":"CVE-2026-76197","cvss":10,"epss":0.0351,"slug":"cve-2026-76197-adobe-campaign-classic-os-command-injection","title":"Adobe Campaign Classic OS command injection","severity":"critical","exploited":false,"published_at":"2026-08-25T18:18:05.11+00:00","url":"https://junglewise.ai/threats/cve-2026-76197-adobe-campaign-classic-os-command-injection"},{"cve":"CVE-2026-76195","cvss":10,"epss":0.0351,"slug":"cve-2026-76195-adobe-campaign-classic-os-command-injection","title":"Adobe Campaign Classic OS command injection","severity":"critical","exploited":false,"published_at":"2026-08-25T18:18:04.967+00:00","url":"https://junglewise.ai/threats/cve-2026-76195-adobe-campaign-classic-os-command-injection"}],"high":118,"name":"Linux Kernel","rank":2,"slug":"kernel","score":700,"vendor":{"name":"Linux","slug":"linux"},"critical":41,"max_cvss":10,"max_epss":0.0879,"exploited":1,"vulnerabilities":249,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"top":[{"cvss":9.8,"slug":"nltk-jvm-argument-injection-in-stanford-wrappers-via-per-call-options-628f3938","title":"NLTK JVM argument injection in Stanford wrappers via per-call options","severity":"critical","exploited":false,"published_at":"2026-08-25T18:31:52+00:00","url":"https://junglewise.ai/threats/nltk-jvm-argument-injection-in-stanford-wrappers-via-per-call-options-628f3938"},{"cve":"CVE-2026-79675","cvss":9.8,"epss":0.0078,"slug":"cve-2026-79675-nltk-jvm-argument-injection-bypass-in-stanford-wrappers","title":"NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to","severity":"critical","exploited":false,"published_at":"2026-08-25T16:17:28.013+00:00","url":"https://junglewise.ai/threats/cve-2026-79675-nltk-jvm-argument-injection-bypass-in-stanford-wrappers"},{"cvss":9.8,"slug":"nltk-unsafe-pickle-deserialization-in-allowlisted-loaders-eeef7a48","title":"NLTK unsafe pickle deserialization in allowlisted loaders","severity":"critical","exploited":false,"published_at":"2026-08-25T12:31:25+00:00","url":"https://junglewise.ai/threats/nltk-unsafe-pickle-deserialization-in-allowlisted-loaders-eeef7a48"}],"high":18,"name":"Pip Nltk","rank":3,"slug":"nltk","score":99,"vendor":{"name":"Pip","slug":"pip"},"critical":6,"max_cvss":9.8,"max_epss":0.0127,"exploited":0,"vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/nltk"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch FX2120","rank":4,"slug":"vigorswitch-fx2120","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-fx2120"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G1280","rank":5,"slug":"vigorswitch-g1280","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g1280"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G1282","rank":6,"slug":"vigorswitch-g1282","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g1282"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G2100","rank":7,"slug":"vigorswitch-g2100","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2100"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G2121","rank":8,"slug":"vigorswitch-g2121","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2121"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G2280x","rank":9,"slug":"vigorswitch-g2280x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2280x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G2282x","rank":10,"slug":"vigorswitch-g2282x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2282x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G2540x","rank":11,"slug":"vigorswitch-g2540x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2540x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G2540xs","rank":12,"slug":"vigorswitch-g2540xs","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2540xs"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch G2542x","rank":13,"slug":"vigorswitch-g2542x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2542x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P1280","rank":14,"slug":"vigorswitch-p1280","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1280"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P1281x","rank":15,"slug":"vigorswitch-p1281x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1281x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P1282","rank":16,"slug":"vigorswitch-p1282","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1282"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P2100","rank":17,"slug":"vigorswitch-p2100","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p2100"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P2121","rank":18,"slug":"vigorswitch-p2121","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p2121"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P2280x","rank":19,"slug":"vigorswitch-p2280x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p2280x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P2282x","rank":20,"slug":"vigorswitch-p2282x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p2282x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P2540x","rank":21,"slug":"vigorswitch-p2540x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p2540x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P2540xs","rank":22,"slug":"vigorswitch-p2540xs","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p2540xs"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P2542x","rank":23,"slug":"vigorswitch-p2542x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p2542x"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch P2542xh","rank":24,"slug":"vigorswitch-p2542xh","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p2542xh"},{"hub":true,"top":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"}],"high":25,"name":"DrayTek VigorSwitch PQ2121x","rank":25,"slug":"vigorswitch-pq2121x","score":89,"vendor":{"name":"DrayTek","slug":"draytek"},"critical":2,"max_cvss":9.8,"max_epss":0.0279,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-pq2121x"}],"previous":{"key":"2026-08-17","top":"Linux Kernel","period":{"end":"2026-08-23","start":"2026-08-17"},"totals":{"high":829,"critical":270,"exploited":4,"technologies":912,"vulnerabilities":2072},"url":"https://junglewise.ai/threats/weekly/2026-08-17"},"next":{"key":"2026-08-31","top":"Linux Kernel","period":{"end":"2026-09-06","start":"2026-08-31"},"totals":{"high":771,"critical":294,"exploited":7,"technologies":1040,"vulnerabilities":2379},"url":"https://junglewise.ai/threats/weekly/2026-08-31"}}