{"schema_version":1,"title":"Most vulnerable technologies: week of 21 to 27 September 2026 (week 39)","summary":"In the week of 21 to 27 September 2026, Junglewise Threat Intelligence recorded 2,950 new vulnerabilities: 192 critical, 892 high and 6 exploited in the wild. The most vulnerable technology was Linux Kernel, with 607 vulnerabilities (20 critical), followed by Microsoft Windows (28) and IBM Financial Transaction Manager (45).","url":"https://junglewise.ai/threats/weekly/2026-09-21","json_url":"https://junglewise.ai/threats/weekly/2026-09-21.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/weekly/2026-09-21","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"Technologies are ranked by 10 points per vulnerability exploited in the wild, 5 per critical, 2 per high and 1 per vulnerability, over vulnerabilities published in the period (UTC). A vulnerability counts for every technology it affects.","kind":"week","period":{"end":"2026-09-27","start":"2026-09-21"},"totals":{"high":892,"tracked":58557,"critical":192,"exploited":6,"technologies":1253,"vulnerabilities":2950},"notable":[{"cve":"CVE-2026-93952","cvss":10,"epss":0.009,"slug":"cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation","title":"VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functio","severity":"critical","exploited":true,"published_at":"2026-09-22T08:16:43.047+00:00","url":"https://junglewise.ai/threats/cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation"},{"cve":"CVE-2026-93616","cvss":9.8,"epss":0.1965,"slug":"cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability","title":"A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Poin","severity":"critical","exploited":true,"published_at":"2026-09-22T13:17:11.963+00:00","url":"https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability"},{"cve":"CVE-2026-94127","cvss":9.8,"epss":0.0223,"slug":"cve-2026-94127-f5-big-ip-apm-heap-based-buffer-overflow","title":"When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code","severity":"critical","exploited":true,"published_at":"2026-09-22T15:17:24.313+00:00","url":"https://junglewise.ai/threats/cve-2026-94127-f5-big-ip-apm-heap-based-buffer-overflow"},{"cve":"CVE-2026-87902","cvss":8.1,"epss":0.0288,"slug":"cve-2026-87902-wordpress-core-remote-file-inclusion","title":"An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the","severity":"critical","exploited":true,"published_at":"2026-09-22T17:17:28.31+00:00","url":"https://junglewise.ai/threats/cve-2026-87902-wordpress-core-remote-file-inclusion"},{"cve":"CVE-2026-88772","slug":"cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler","title":"Citrix NetScaler ADC and Gateway remote code execution and denial of service","severity":"critical","exploited":true,"published_at":"2026-09-27T17:16:56.39+00:00","url":"https://junglewise.ai/threats/cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler"},{"cve":"CVE-2026-88771","slug":"cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc","title":"Citrix NetScaler ADC and Gateway improper input validation","severity":"critical","exploited":true,"published_at":"2026-09-27T17:16:56.26+00:00","url":"https://junglewise.ai/threats/cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc"},{"cve":"CVE-2026-94097","cvss":10,"epss":0.0294,"slug":"cve-2026-94097-a-vulnerability-was-determined-in-netcore-nbr200v2-1-3-241127","title":"Netcore NBR200V2 command injection in network tools CGI","severity":"critical","exploited":false,"published_at":"2026-09-21T00:16:59.793+00:00","url":"https://junglewise.ai/threats/cve-2026-94097-a-vulnerability-was-determined-in-netcore-nbr200v2-1-3-241127"},{"cve":"CVE-2026-80155","cvss":10,"epss":0.0167,"slug":"cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before","title":"Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:01.917+00:00","url":"https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before"},{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-84412","cvss":10,"epss":0.0125,"slug":"cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.923+00:00","url":"https://junglewise.ai/threats/cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"}],"vendors":[{"hub":true,"high":126,"name":"Linux","rank":1,"slug":"linux","critical":20,"exploited":0,"vulnerabilities":589,"url":"https://junglewise.ai/threats/vendors/linux"},{"hub":true,"high":54,"name":"IBM","rank":2,"slug":"ibm","critical":12,"exploited":0,"vulnerabilities":96,"url":"https://junglewise.ai/threats/vendors/ibm"},{"hub":true,"high":18,"name":"Adobe","rank":3,"slug":"adobe","critical":25,"exploited":0,"vulnerabilities":53,"url":"https://junglewise.ai/threats/vendors/adobe"},{"hub":true,"high":6,"name":"Microsoft","rank":4,"slug":"microsoft","critical":22,"exploited":0,"vulnerabilities":30,"url":"https://junglewise.ai/threats/vendors/microsoft"},{"hub":true,"high":30,"name":"Openclaw","rank":5,"slug":"openclaw","critical":0,"exploited":0,"vulnerabilities":73,"url":"https://junglewise.ai/threats/vendors/openclaw"},{"hub":true,"high":22,"name":"Apache","rank":6,"slug":"apache","critical":7,"exploited":0,"vulnerabilities":43,"url":"https://junglewise.ai/threats/vendors/apache"},{"hub":true,"high":15,"name":"Red Hat","rank":7,"slug":"red-hat","critical":4,"exploited":0,"vulnerabilities":42,"url":"https://junglewise.ai/threats/vendors/red-hat"},{"hub":true,"high":24,"name":"Foxit","rank":8,"slug":"foxit","critical":0,"exploited":0,"vulnerabilities":31,"url":"https://junglewise.ai/threats/vendors/foxit"},{"hub":true,"high":3,"name":"Lantronix","rank":9,"slug":"lantronix","critical":10,"exploited":0,"vulnerabilities":13,"url":"https://junglewise.ai/threats/vendors/lantronix"},{"hub":true,"high":13,"name":"Zoho","rank":10,"slug":"zoho","critical":2,"exploited":0,"vulnerabilities":15,"url":"https://junglewise.ai/threats/vendors/zoho"}],"generated_at":"2026-09-29T00:07:00.12248+00:00","technologies":[{"hub":true,"top":[{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-84412","cvss":10,"epss":0.0125,"slug":"cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.923+00:00","url":"https://junglewise.ai/threats/cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75723","cvss":10,"epss":0.0117,"slug":"cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.163+00:00","url":"https://junglewise.ai/threats/cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect"}],"high":127,"name":"Linux Kernel","rank":1,"slug":"kernel","score":961,"vendor":{"name":"Linux","slug":"linux"},"critical":20,"max_cvss":10,"max_epss":0.0125,"exploited":0,"vulnerabilities":607,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"top":[{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-84412","cvss":10,"epss":0.0125,"slug":"cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.923+00:00","url":"https://junglewise.ai/threats/cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75723","cvss":10,"epss":0.0117,"slug":"cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.163+00:00","url":"https://junglewise.ai/threats/cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect"}],"high":4,"name":"Microsoft Windows","rank":2,"slug":"windows-","score":146,"vendor":{"name":"Microsoft","slug":"microsoft"},"critical":22,"max_cvss":10,"max_epss":0.0125,"exploited":0,"vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/windows-"},{"hub":true,"top":[{"cve":"CVE-2026-18169","cvss":9.9,"epss":0.0053,"slug":"cve-2026-18169-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could","title":"IBM Financial Transaction Manager symbolic link validation bypass","severity":"critical","exploited":false,"published_at":"2026-09-22T23:17:06.73+00:00","url":"https://junglewise.ai/threats/cve-2026-18169-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could"},{"cve":"CVE-2026-18163","cvss":9.8,"epss":0.0051,"slug":"cve-2026-18163-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could","title":"IBM Financial Transaction Manager arbitrary code execution via deserialization","severity":"critical","exploited":false,"published_at":"2026-09-22T23:17:06.6+00:00","url":"https://junglewise.ai/threats/cve-2026-18163-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could"},{"cve":"CVE-2026-18162","cvss":9.8,"epss":0.0048,"slug":"cve-2026-18162-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could","title":"IBM Financial Transaction Manager remote code execution in Function constructor","severity":"critical","exploited":false,"published_at":"2026-09-22T23:17:06.463+00:00","url":"https://junglewise.ai/threats/cve-2026-18162-ibm-financial-transaction-manager-ftm-for-redhat-openshift-could"}],"high":24,"name":"IBM Financial Transaction Manager","rank":3,"slug":"financial-transaction-manager","score":123,"vendor":{"name":"IBM","slug":"ibm"},"critical":6,"max_cvss":9.9,"max_epss":0.0053,"exploited":0,"vulnerabilities":45,"url":"https://junglewise.ai/threats/technologies/financial-transaction-manager"},{"hub":true,"top":[{"cve":"CVE-2026-100599","cvss":8.8,"slug":"cve-2026-100599-openclaw-versions-2026-5-1-through-2026-7-0-fail-to-apply-the","title":"OpenClaw exec approval bypass in Google Meet node commands","severity":"high","exploited":false,"published_at":"2026-09-26T03:17:08.667+00:00","url":"https://junglewise.ai/threats/cve-2026-100599-openclaw-versions-2026-5-1-through-2026-7-0-fail-to-apply-the"},{"cve":"CVE-2026-100596","cvss":8.8,"slug":"cve-2026-100596-openclaw-versions-before-2026-7-1-fail-to-properly-authorize-non","title":"OpenClaw authorization bypass in MCP configuration","severity":"high","exploited":false,"published_at":"2026-09-26T03:17:08.187+00:00","url":"https://junglewise.ai/threats/cve-2026-100596-openclaw-versions-before-2026-7-1-fail-to-properly-authorize-non"},{"cve":"CVE-2026-100587","cvss":8.8,"slug":"cve-2026-100587-openclaw-versions-before-2026-7-1-fail-to-properly-validate","title":"OpenClaw missing authorization in Codex computer-use install","severity":"high","exploited":false,"published_at":"2026-09-26T03:17:06.81+00:00","url":"https://junglewise.ai/threats/cve-2026-100587-openclaw-versions-before-2026-7-1-fail-to-properly-validate"}],"high":24,"name":"Openclaw","rank":4,"slug":"openclaw","score":103,"vendor":{"name":"Openclaw","slug":"openclaw"},"critical":0,"max_cvss":8.8,"max_epss":null,"exploited":0,"vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/openclaw"},{"hub":true,"top":[{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-84412","cvss":10,"epss":0.0125,"slug":"cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.923+00:00","url":"https://junglewise.ai/threats/cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75723","cvss":10,"epss":0.0117,"slug":"cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.163+00:00","url":"https://junglewise.ai/threats/cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect"}],"high":1,"name":"Adobe Campaign Classic","rank":5,"slug":"campaign-classic","score":99,"vendor":{"name":"Adobe","slug":"adobe"},"critical":16,"max_cvss":10,"max_epss":0.0125,"exploited":0,"vulnerabilities":17,"url":"https://junglewise.ai/threats/technologies/campaign-classic"},{"hub":true,"top":[{"cve":"CVE-2026-91813","cvss":8.8,"epss":0.0009,"slug":"cve-2026-91813-a-vulnerability-in-foxit-pdf-editor-reader-s-update-mechanism","title":"Foxit PDF Reader/Editor update mechanism privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-23T08:17:13.55+00:00","url":"https://junglewise.ai/threats/cve-2026-91813-a-vulnerability-in-foxit-pdf-editor-reader-s-update-mechanism"},{"cve":"CVE-2026-91803","cvss":8.8,"epss":0.0012,"slug":"cve-2026-91803-a-local-privilege-escalation-vulnerability-exists-in-the-updater","title":"Foxit PDF Editor privilege escalation in updater via DLL loading","severity":"high","exploited":false,"published_at":"2026-09-23T08:17:12.363+00:00","url":"https://junglewise.ai/threats/cve-2026-91803-a-local-privilege-escalation-vulnerability-exists-in-the-updater"},{"cve":"CVE-2026-91800","cvss":8.8,"epss":0.001,"slug":"cve-2026-91800-a-local-privilege-escalation-vulnerability-exists-in-the","title":"Foxit PDF Editor privilege escalation in installer on macOS","severity":"high","exploited":false,"published_at":"2026-09-23T08:17:12.023+00:00","url":"https://junglewise.ai/threats/cve-2026-91800-a-local-privilege-escalation-vulnerability-exists-in-the"}],"high":24,"name":"Foxit PDF Editor","rank":6,"slug":"pdf-editor","score":79,"vendor":{"name":"Foxit","slug":"foxit"},"critical":0,"max_cvss":8.8,"max_epss":0.0022,"exploited":0,"vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/pdf-editor"},{"hub":true,"top":[{"cve":"CVE-2026-91813","cvss":8.8,"epss":0.0009,"slug":"cve-2026-91813-a-vulnerability-in-foxit-pdf-editor-reader-s-update-mechanism","title":"Foxit PDF Reader/Editor update mechanism privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-23T08:17:13.55+00:00","url":"https://junglewise.ai/threats/cve-2026-91813-a-vulnerability-in-foxit-pdf-editor-reader-s-update-mechanism"},{"cve":"CVE-2026-91803","cvss":8.8,"epss":0.0012,"slug":"cve-2026-91803-a-local-privilege-escalation-vulnerability-exists-in-the-updater","title":"Foxit PDF Editor privilege escalation in updater via DLL loading","severity":"high","exploited":false,"published_at":"2026-09-23T08:17:12.363+00:00","url":"https://junglewise.ai/threats/cve-2026-91803-a-local-privilege-escalation-vulnerability-exists-in-the-updater"},{"cve":"CVE-2026-91798","cvss":8.8,"epss":0.001,"slug":"cve-2026-91798-a-local-privilege-escalation-vulnerability-exists-in-the-update","title":"Foxit PDF Editor and Reader privilege escalation in update daemon","severity":"high","exploited":false,"published_at":"2026-09-23T08:17:11.793+00:00","url":"https://junglewise.ai/threats/cve-2026-91798-a-local-privilege-escalation-vulnerability-exists-in-the-update"}],"high":23,"name":"Foxit PDF Reader","rank":7,"slug":"pdf-reader","score":76,"vendor":{"name":"Foxit","slug":"foxit"},"critical":0,"max_cvss":8.8,"max_epss":0.0022,"exploited":0,"vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/pdf-reader"},{"hub":true,"top":[{"cve":"CVE-2026-80155","cvss":10,"epss":0.0167,"slug":"cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before","title":"Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:01.917+00:00","url":"https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before"},{"cve":"CVE-2026-80147","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.863+00:00","url":"https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"},{"cve":"CVE-2026-80146","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.72+00:00","url":"https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"}],"high":3,"name":"Lantronix EMG7500","rank":8,"slug":"emg7500","score":69,"vendor":{"name":"Lantronix","slug":"lantronix"},"critical":10,"max_cvss":10,"max_epss":0.0299,"exploited":0,"vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/emg7500"},{"hub":true,"top":[{"cve":"CVE-2026-80155","cvss":10,"epss":0.0167,"slug":"cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before","title":"Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:01.917+00:00","url":"https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before"},{"cve":"CVE-2026-80147","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.863+00:00","url":"https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"},{"cve":"CVE-2026-80146","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.72+00:00","url":"https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"}],"high":3,"name":"Lantronix EMG8500","rank":9,"slug":"emg8500","score":69,"vendor":{"name":"Lantronix","slug":"lantronix"},"critical":10,"max_cvss":10,"max_epss":0.0299,"exploited":0,"vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/emg8500"},{"hub":true,"top":[{"cve":"CVE-2026-80155","cvss":10,"epss":0.0167,"slug":"cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before","title":"Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:01.917+00:00","url":"https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before"},{"cve":"CVE-2026-80147","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.863+00:00","url":"https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"},{"cve":"CVE-2026-80146","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.72+00:00","url":"https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"}],"high":3,"name":"Lantronix SLB882","rank":10,"slug":"slb882","score":69,"vendor":{"name":"Lantronix","slug":"lantronix"},"critical":10,"max_cvss":10,"max_epss":0.0299,"exploited":0,"vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/slb882"},{"hub":true,"top":[{"cve":"CVE-2026-80155","cvss":10,"epss":0.0167,"slug":"cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before","title":"Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:01.917+00:00","url":"https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before"},{"cve":"CVE-2026-80147","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.863+00:00","url":"https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"},{"cve":"CVE-2026-80146","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.72+00:00","url":"https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"}],"high":3,"name":"Lantronix SLC8000","rank":11,"slug":"slc8000","score":69,"vendor":{"name":"Lantronix","slug":"lantronix"},"critical":10,"max_cvss":10,"max_epss":0.0299,"exploited":0,"vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/slc8000"},{"hub":true,"top":[{"cve":"CVE-2026-80155","cvss":10,"epss":0.0167,"slug":"cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before","title":"Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:01.917+00:00","url":"https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before"},{"cve":"CVE-2026-80147","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.863+00:00","url":"https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"},{"cve":"CVE-2026-80146","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.72+00:00","url":"https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"}],"high":3,"name":"Lantronix SLC9000","rank":12,"slug":"slc9000","score":69,"vendor":{"name":"Lantronix","slug":"lantronix"},"critical":10,"max_cvss":10,"max_epss":0.0299,"exploited":0,"vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/slc9000"},{"hub":true,"top":[{"cve":"CVE-2026-80155","cvss":10,"epss":0.0167,"slug":"cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before","title":"Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:01.917+00:00","url":"https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before"},{"cve":"CVE-2026-80147","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.863+00:00","url":"https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"},{"cve":"CVE-2026-80146","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.72+00:00","url":"https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"}],"high":2,"name":"Lantronix SLCx-02","rank":13,"slug":"slcx-02","score":66,"vendor":{"name":"Lantronix","slug":"lantronix"},"critical":10,"max_cvss":10,"max_epss":0.0299,"exploited":0,"vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/slcx-02"},{"hub":true,"top":[{"cve":"CVE-2026-80155","cvss":10,"epss":0.0167,"slug":"cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before","title":"Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:01.917+00:00","url":"https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before"},{"cve":"CVE-2026-80147","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.863+00:00","url":"https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"},{"cve":"CVE-2026-80146","cvss":9.9,"epss":0.0085,"slug":"cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500","title":"Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command","severity":"critical","exploited":false,"published_at":"2026-09-22T16:18:00.72+00:00","url":"https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500"}],"high":2,"name":"Lantronix SLCx-03","rank":14,"slug":"slcx-03","score":66,"vendor":{"name":"Lantronix","slug":"lantronix"},"critical":10,"max_cvss":10,"max_epss":0.0299,"exploited":0,"vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/slcx-03"},{"hub":true,"top":[{"cve":"CVE-2026-77244","cvss":10,"epss":0.0028,"slug":"cve-2026-77244-mcp-atlassian-authentication-bypass-in-http-transport","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport acc","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:17.56+00:00","url":"https://junglewise.ai/threats/cve-2026-77244-mcp-atlassian-authentication-bypass-in-http-transport"},{"cve":"CVE-2026-77243","cvss":8.8,"epss":0.0036,"slug":"cve-2026-77243-mcp-atlassian-tool-authorization-bypass-in-tools-call","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOL","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:17.41+00:00","url":"https://junglewise.ai/threats/cve-2026-77243-mcp-atlassian-tool-authorization-bypass-in-tools-call"},{"cve":"CVE-2026-77262","cvss":8.6,"epss":0.0054,"slug":"cve-2026-77262-sooperset-mcp-atlassian-path-traversal-in-confluence-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_atta","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:50.48+00:00","url":"https://junglewise.ai/threats/cve-2026-77262-sooperset-mcp-atlassian-path-traversal-in-confluence-upload"}],"high":15,"name":"mcp-atlassian (PyPI)","rank":15,"slug":"mcp-atlassian","score":59,"vendor":{"name":"PyPI","slug":"pypi"},"critical":1,"max_cvss":10,"max_epss":0.0054,"exploited":0,"vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/mcp-atlassian"},{"hub":true,"top":[{"cve":"CVE-2026-16346","cvss":9.9,"epss":0.0045,"slug":"cve-2026-16346-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote","title":"IBM DataStage command injection on Cloud Pak for Data","severity":"critical","exploited":false,"published_at":"2026-09-22T22:17:06.607+00:00","url":"https://junglewise.ai/threats/cve-2026-16346-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote"},{"cve":"CVE-2026-81549","cvss":9.6,"epss":0.0026,"slug":"cve-2026-81549-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote","title":"IBM DataStage on Cloud Pak for Data SSRF via X-Forwarded-Proto header","severity":"critical","exploited":false,"published_at":"2026-09-24T15:17:39.897+00:00","url":"https://junglewise.ai/threats/cve-2026-81549-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote"},{"cve":"CVE-2026-82093","cvss":8.8,"epss":0.0042,"slug":"cve-2026-82093-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote","title":"IBM DataStage unsafe deserialization remote code execution","severity":"high","exploited":false,"published_at":"2026-09-24T15:17:40.733+00:00","url":"https://junglewise.ai/threats/cve-2026-82093-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote"}],"high":13,"name":"IBM Datastage On Cloud Pak For Data","rank":16,"slug":"datastage-on-cloud-pak-for-data","score":51,"vendor":{"name":"IBM","slug":"ibm"},"critical":2,"max_cvss":9.9,"max_epss":0.0167,"exploited":0,"vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data"},{"hub":true,"top":[{"cve":"CVE-2026-84719","cvss":9.9,"epss":0.0043,"slug":"cve-2026-84719-a-flaw-was-found-in-the-ansible-automation-platform-automation","title":"Red Hat Ansible Automation Platform controller privilege escalation in WorkflowJobTemplate copy","severity":"critical","exploited":false,"published_at":"2026-09-23T20:17:18.617+00:00","url":"https://junglewise.ai/threats/cve-2026-84719-a-flaw-was-found-in-the-ansible-automation-platform-automation"},{"cve":"CVE-2026-84502","cvss":9.9,"epss":0.0062,"slug":"cve-2026-84502-a-flaw-was-found-in-red-hat-ansible-automation-platform-s","title":"Red Hat Ansible Automation Platform controller command injection in project scm_url","severity":"critical","exploited":false,"published_at":"2026-09-23T19:19:40.377+00:00","url":"https://junglewise.ai/threats/cve-2026-84502-a-flaw-was-found-in-red-hat-ansible-automation-platform-s"},{"cve":"CVE-2026-84474","cvss":9.9,"epss":0.008,"slug":"cve-2026-84474-a-flaw-was-found-in-red-hat-ansible-automation-platform-s","title":"Red Hat Ansible Automation Platform credential exposure and RCE","severity":"critical","exploited":false,"published_at":"2026-09-23T19:19:39.93+00:00","url":"https://junglewise.ai/threats/cve-2026-84474-a-flaw-was-found-in-red-hat-ansible-automation-platform-s"}],"high":7,"name":"Red Hat Ansible Automation Platform","rank":17,"slug":"ansible-automation-platform-2","score":47,"vendor":{"name":"Red Hat","slug":"red-hat"},"critical":3,"max_cvss":9.9,"max_epss":0.008,"exploited":0,"vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/ansible-automation-platform-2"},{"hub":true,"top":[{"cve":"CVE-2026-100717","cvss":9.9,"slug":"cve-2026-100717-froxlor-is-a-server-administration-panel-in-versions-2-3-10-and","title":"froxlor CRLF injection in subdomain redirect validation","severity":"critical","exploited":false,"published_at":"2026-09-26T14:16:57.753+00:00","url":"https://junglewise.ai/threats/cve-2026-100717-froxlor-is-a-server-administration-panel-in-versions-2-3-10-and"},{"cve":"CVE-2026-100716","cvss":9.9,"slug":"cve-2026-100716-froxlor-is-a-server-administration-panel-in-versions-2-3-10-and","title":"Froxlor server administration panel symlink path traversal privilege escalation","severity":"critical","exploited":false,"published_at":"2026-09-26T14:16:57.583+00:00","url":"https://junglewise.ai/threats/cve-2026-100716-froxlor-is-a-server-administration-panel-in-versions-2-3-10-and"},{"cve":"CVE-2026-100715","cvss":9.6,"slug":"cve-2026-100715-froxlor-through-2-3-10-is-vulnerable-to-arbitrary-file-deletion","title":"Froxlor arbitrary file deletion via symlink following in cron task","severity":"critical","exploited":false,"published_at":"2026-09-26T14:16:57.427+00:00","url":"https://junglewise.ai/threats/cve-2026-100715-froxlor-through-2-3-10-is-vulnerable-to-arbitrary-file-deletion"}],"high":6,"name":"Froxlor","rank":18,"slug":"froxlor","score":45,"vendor":{"name":"Froxlor","slug":"froxlor"},"critical":4,"max_cvss":9.9,"max_epss":null,"exploited":0,"vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/froxlor"},{"hub":true,"top":[{"cve":"CVE-2026-94097","cvss":10,"epss":0.0294,"slug":"cve-2026-94097-a-vulnerability-was-determined-in-netcore-nbr200v2-1-3-241127","title":"Netcore NBR200V2 command injection in network tools CGI","severity":"critical","exploited":false,"published_at":"2026-09-21T00:16:59.793+00:00","url":"https://junglewise.ai/threats/cve-2026-94097-a-vulnerability-was-determined-in-netcore-nbr200v2-1-3-241127"},{"cve":"CVE-2026-94101","cvss":9.9,"epss":0.0081,"slug":"cve-2026-94101-a-security-vulnerability-has-been-detected-in-netcore-nbr200v2-1","title":"Netcore NBR200V2 buffer overflow in routerd VLAN handler","severity":"critical","exploited":false,"published_at":"2026-09-21T02:16:53.317+00:00","url":"https://junglewise.ai/threats/cve-2026-94101-a-security-vulnerability-has-been-detected-in-netcore-nbr200v2-1"},{"cve":"CVE-2026-94100","cvss":9.9,"epss":0.0081,"slug":"cve-2026-94100-a-weakness-has-been-identified-in-netcore-nbr200v2-1-3-241127","title":"Netcore NBR200V2 buffer overflow in WAN VLAN configuration","severity":"critical","exploited":false,"published_at":"2026-09-21T01:16:30.17+00:00","url":"https://junglewise.ai/threats/cve-2026-94100-a-weakness-has-been-identified-in-netcore-nbr200v2-1-3-241127"}],"high":0,"name":"Netcore NBR200V2","rank":19,"slug":"nbr200v2","score":42,"vendor":{"name":"Netcore","slug":"netcore"},"critical":7,"max_cvss":10,"max_epss":0.0294,"exploited":0,"vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/nbr200v2"},{"hub":true,"top":[{"cve":"CVE-2026-75682","cvss":9.9,"epss":0.0054,"slug":"cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of","title":"Adobe Connect SQL injection leading to arbitrary code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.26+00:00","url":"https://junglewise.ai/threats/cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of"},{"cve":"CVE-2026-75698","cvss":9.3,"epss":0.0032,"slug":"cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss","title":"Adobe Connect reflected Cross-Site Scripting in web page","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.91+00:00","url":"https://junglewise.ai/threats/cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss"},{"cve":"CVE-2026-75697","cvss":9.3,"epss":0.003,"slug":"cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting in form fields","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.77+00:00","url":"https://junglewise.ai/threats/cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"}],"high":1,"name":"Adobe Connect","rank":20,"slug":"adobe-connect","score":41,"vendor":{"name":"Adobe","slug":"adobe"},"critical":6,"max_cvss":9.9,"max_epss":0.0105,"exploited":0,"vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/adobe-connect"},{"hub":true,"top":[{"cve":"CVE-2026-75682","cvss":9.9,"epss":0.0054,"slug":"cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of","title":"Adobe Connect SQL injection leading to arbitrary code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.26+00:00","url":"https://junglewise.ai/threats/cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of"},{"cve":"CVE-2026-75698","cvss":9.3,"epss":0.0032,"slug":"cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss","title":"Adobe Connect reflected Cross-Site Scripting in web page","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.91+00:00","url":"https://junglewise.ai/threats/cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss"},{"cve":"CVE-2026-75697","cvss":9.3,"epss":0.003,"slug":"cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting in form fields","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.77+00:00","url":"https://junglewise.ai/threats/cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"}],"high":1,"name":"Adobe Connect For Mobile","rank":21,"slug":"connect-for-mobile","score":41,"vendor":{"name":"Adobe","slug":"adobe"},"critical":6,"max_cvss":9.9,"max_epss":0.0105,"exploited":0,"vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/connect-for-mobile"},{"hub":true,"top":[{"cve":"CVE-2026-75682","cvss":9.9,"epss":0.0054,"slug":"cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of","title":"Adobe Connect SQL injection leading to arbitrary code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.26+00:00","url":"https://junglewise.ai/threats/cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of"},{"cve":"CVE-2026-75698","cvss":9.3,"epss":0.0032,"slug":"cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss","title":"Adobe Connect reflected Cross-Site Scripting in web page","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.91+00:00","url":"https://junglewise.ai/threats/cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss"},{"cve":"CVE-2026-75697","cvss":9.3,"epss":0.003,"slug":"cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting in form fields","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.77+00:00","url":"https://junglewise.ai/threats/cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"}],"high":1,"name":"Apple macOS","rank":22,"slug":"macos-tahoe","score":41,"vendor":{"name":"Apple","slug":"apple"},"critical":6,"max_cvss":9.9,"max_epss":0.0105,"exploited":0,"vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"hub":true,"top":[{"cve":"CVE-2026-6928","cvss":9.8,"epss":0.0045,"slug":"cve-2026-6928-ibm-concert-1-0-0-through-3-0-0-references-or-accesses-memory","title":"IBM Concert use-after-free memory corruption","severity":"critical","exploited":false,"published_at":"2026-09-23T21:17:02.43+00:00","url":"https://junglewise.ai/threats/cve-2026-6928-ibm-concert-1-0-0-through-3-0-0-references-or-accesses-memory"},{"cve":"CVE-2026-6730","cvss":9.8,"epss":0.0044,"slug":"cve-2026-6730-ibm-concert-1-0-0-through-3-0-0-is-vulnerable-to-a-buffer-overflow","title":"IBM Concert buffer overflow in local bounds checking","severity":"critical","exploited":false,"published_at":"2026-09-23T21:17:02.053+00:00","url":"https://junglewise.ai/threats/cve-2026-6730-ibm-concert-1-0-0-through-3-0-0-is-vulnerable-to-a-buffer-overflow"},{"cve":"CVE-2026-6721","cvss":9.8,"epss":0.0145,"slug":"cve-2026-6721-ibm-concert-1-0-0-through-3-0-0-allows-an-unauthenticated-remote","title":"IBM Concert command injection","severity":"critical","exploited":false,"published_at":"2026-09-23T21:17:01.927+00:00","url":"https://junglewise.ai/threats/cve-2026-6721-ibm-concert-1-0-0-through-3-0-0-allows-an-unauthenticated-remote"}],"high":2,"name":"IBM Concert","rank":23,"slug":"concert","score":40,"vendor":{"name":"IBM","slug":"ibm"},"critical":4,"max_cvss":9.8,"max_epss":0.0145,"exploited":0,"vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/concert"},{"hub":true,"top":[{"cve":"CVE-2026-86248","cvss":9.8,"epss":0.0039,"slug":"cve-2026-86248-client-cert-authentication-does-not-fail-as-expected-for-some","title":"Apache Tomcat CLIENT_CERT authentication bypass when soft fail disabled","severity":"critical","exploited":false,"published_at":"2026-09-23T12:17:08.237+00:00","url":"https://junglewise.ai/threats/cve-2026-86248-client-cert-authentication-does-not-fail-as-expected-for-some"},{"cve":"CVE-2026-76183","cvss":9.8,"epss":0.0039,"slug":"cve-2026-76183-authentication-bypass-by-alternate-name-vulnerability-in-apache","title":"Apache Tomcat authentication bypass in WebSocket endpoints","severity":"critical","exploited":false,"published_at":"2026-09-23T12:17:06.537+00:00","url":"https://junglewise.ai/threats/cve-2026-76183-authentication-bypass-by-alternate-name-vulnerability-in-apache"},{"cve":"CVE-2026-86350","cvss":9.1,"epss":0.0031,"slug":"cve-2026-86350-inconsistent-interpretation-of-http-2-requests-http-request","title":"Apache Tomcat HTTP/2 request smuggling via header mix-up","severity":"critical","exploited":false,"published_at":"2026-09-23T12:17:08.35+00:00","url":"https://junglewise.ai/threats/cve-2026-86350-inconsistent-interpretation-of-http-2-requests-http-request"}],"high":7,"name":"Apache Tomcat","rank":24,"slug":"tomcat","score":40,"vendor":{"name":"Apache","slug":"apache"},"critical":3,"max_cvss":9.8,"max_epss":0.0053,"exploited":0,"vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/tomcat"},{"hub":true,"top":[{"cve":"CVE-2026-88772","slug":"cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler","title":"Citrix NetScaler ADC and Gateway remote code execution and denial of service","severity":"critical","exploited":true,"published_at":"2026-09-27T17:16:56.39+00:00","url":"https://junglewise.ai/threats/cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler"},{"cve":"CVE-2026-88771","slug":"cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc","title":"Citrix NetScaler ADC and Gateway improper input validation","severity":"critical","exploited":true,"published_at":"2026-09-27T17:16:56.26+00:00","url":"https://junglewise.ai/threats/cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc"},{"cve":"CVE-2026-88778","slug":"cve-2026-88778-predictable-exact-value-from-previous-values-vulnerability-in","title":"Citrix NetScaler ADC predictable value generation","severity":"info","exploited":false,"published_at":"2026-09-27T17:16:57.11+00:00","url":"https://junglewise.ai/threats/cve-2026-88778-predictable-exact-value-from-previous-values-vulnerability-in"}],"high":0,"name":"Citrix NetScaler Gateway","rank":25,"slug":"gateway","score":38,"vendor":{"name":"Citrix","slug":"citrix"},"critical":2,"max_cvss":null,"max_epss":null,"exploited":2,"vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/gateway"}],"previous":{"key":"2026-09-14","top":"Linux Kernel","period":{"end":"2026-09-20","start":"2026-09-14"},"totals":{"high":1946,"critical":468,"exploited":4,"technologies":1697,"vulnerabilities":4840},"url":"https://junglewise.ai/threats/weekly/2026-09-14"},"next":{"key":"2026-09-28","top":"Google Chrome","period":{"end":"2026-10-04","start":"2026-09-28"},"totals":{"high":851,"tracked":3325,"critical":209,"exploited":6,"technologies":1544,"vulnerabilities":2669},"url":"https://junglewise.ai/threats/weekly/2026-09-28"}}