{"schema_version":1,"title":"Most vulnerable technologies: week of 5 to 11 October 2026 (week 41)","summary":"In the week of 5 to 11 October 2026, Junglewise Threat Intelligence recorded 1,789 new vulnerabilities: 93 critical, 424 high and 3 exploited in the wild. The most vulnerable technology was Google Chrome, with 247 vulnerabilities (0 critical), followed by Linux Kernel (203) and IBM Langflow (24).","url":"https://junglewise.ai/threats/weekly/2026-10-05","json_url":"https://junglewise.ai/threats/weekly/2026-10-05.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/weekly/2026-10-05","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"Technologies are ranked by 10 points per vulnerability exploited in the wild, 5 per critical, 2 per high and 1 per vulnerability, over vulnerabilities published in the period (UTC). A vulnerability counts for every technology it affects.","kind":"week","period":{"end":"2026-10-11","start":"2026-10-05"},"totals":{"high":424,"tracked":6710,"critical":93,"exploited":3,"technologies":959,"vulnerabilities":1789},"notable":[{"cve":"CVE-2015-3306","epss":0.9675,"slug":"cve-2015-3306-proftpd-improper-access-control-vulnerability","title":"ProFTPD improper access control in SITE commands","severity":"critical","exploited":true,"published_at":"2026-10-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-3306-proftpd-improper-access-control-vulnerability"},{"cve":"CVE-2015-5477","epss":0.9128,"slug":"cve-2015-5477-isc-bind-data-processing-errors-vulnerability","title":"ISC BIND denial of service via TKEY queries","severity":"critical","exploited":true,"published_at":"2026-10-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-5477-isc-bind-data-processing-errors-vulnerability"},{"cve":"CVE-2021-3199","epss":0.0822,"slug":"cve-2021-3199-onlyoffice-docs-server-path-traversal-vulnerability","title":"ONLYOFFICE Docs Server path traversal in image upload","severity":"critical","exploited":true,"published_at":"2026-10-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-3199-onlyoffice-docs-server-path-traversal-vulnerability"},{"cve":"CVE-2026-105285","cvss":10,"epss":0.011,"slug":"cve-2026-105285-a-security-vulnerability-has-been-detected-in-totolink-a3002mu-1","title":"Totolink A3002MU stack buffer overflow in QoS handler","severity":"critical","exploited":false,"published_at":"2026-10-05T10:16:38.52+00:00","url":"https://junglewise.ai/threats/cve-2026-105285-a-security-vulnerability-has-been-detected-in-totolink-a3002mu-1"},{"cve":"CVE-2026-105284","cvss":10,"epss":0.0078,"slug":"cve-2026-105284-a-weakness-has-been-identified-in-totolink-a3002mu-1-0-0","title":"Totolink A3002MU authentication bypass in bin/boa","severity":"critical","exploited":false,"published_at":"2026-10-05T09:17:12.35+00:00","url":"https://junglewise.ai/threats/cve-2026-105284-a-weakness-has-been-identified-in-totolink-a3002mu-1-0-0"},{"cve":"CVE-2026-105857","cvss":10,"epss":0.0043,"slug":"cve-2026-105857-payload-is-a-free-and-open-source-headless-content-management","title":"Payload plugin-form-builder remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-06T17:17:21.71+00:00","url":"https://junglewise.ai/threats/cve-2026-105857-payload-is-a-free-and-open-source-headless-content-management"},{"cve":"CVE-2026-106102","cvss":10,"epss":0.003,"slug":"cve-2026-106102-quasar-framework-is-a-framework-for-building-high-performance","title":"Quasar Framework SSR meta serialization XSS","severity":"critical","exploited":false,"published_at":"2026-10-06T17:17:24.27+00:00","url":"https://junglewise.ai/threats/cve-2026-106102-quasar-framework-is-a-framework-for-building-high-performance"},{"cve":"CVE-2026-63692","cvss":10,"slug":"cve-2026-63692-dell-container-storage-modules-versions-prior-to-1-18-0-contain-s","title":"Dell Container Storage Modules missing authentication in gRPC services","severity":"critical","exploited":false,"published_at":"2026-10-06T15:17:19.007+00:00","url":"https://junglewise.ai/threats/cve-2026-63692-dell-container-storage-modules-versions-prior-to-1-18-0-contain-s"},{"cve":"CVE-2026-63688","cvss":10,"slug":"cve-2026-63688-dell-container-storage-modules-csm-versions-prior-to-v1-18-0","title":"Dell Container Storage Modules missing authentication in gRPC server","severity":"critical","exploited":false,"published_at":"2026-10-06T15:17:18.89+00:00","url":"https://junglewise.ai/threats/cve-2026-63688-dell-container-storage-modules-csm-versions-prior-to-v1-18-0"},{"cve":"CVE-2026-39773","cvss":10,"slug":"cve-2026-39773-unauthenticated-privilege-escalation-in-doctreat-core-1-7-0","title":"WordPress Doctreat Core privilege escalation","severity":"critical","exploited":false,"published_at":"2026-10-06T09:17:49.9+00:00","url":"https://junglewise.ai/threats/cve-2026-39773-unauthenticated-privilege-escalation-in-doctreat-core-1-7-0"}],"vendors":[{"hub":true,"high":2,"name":"Google","rank":1,"slug":"google","critical":0,"exploited":0,"vulnerabilities":284,"url":"https://junglewise.ai/threats/vendors/google"},{"hub":true,"high":1,"name":"Linux","rank":2,"slug":"linux","critical":0,"exploited":0,"vulnerabilities":189,"url":"https://junglewise.ai/threats/vendors/linux"},{"hub":true,"high":10,"name":"Dell","rank":3,"slug":"dell","critical":7,"exploited":0,"vulnerabilities":22,"url":"https://junglewise.ai/threats/vendors/dell"},{"hub":true,"high":7,"name":"Hpe","rank":4,"slug":"hpe","critical":8,"exploited":0,"vulnerabilities":22,"url":"https://junglewise.ai/threats/vendors/hpe"},{"hub":true,"high":18,"name":"IBM","rank":5,"slug":"ibm","critical":2,"exploited":0,"vulnerabilities":27,"url":"https://junglewise.ai/threats/vendors/ibm"},{"hub":true,"high":13,"name":"Arista","rank":6,"slug":"arista","critical":3,"exploited":0,"vulnerabilities":24,"url":"https://junglewise.ai/threats/vendors/arista"},{"hub":true,"high":13,"name":"Backstage","rank":7,"slug":"backstage","critical":1,"exploited":0,"vulnerabilities":33,"url":"https://junglewise.ai/threats/vendors/backstage"},{"hub":true,"high":10,"name":"Payload CMS","rank":8,"slug":"payload-cms","critical":5,"exploited":0,"vulnerabilities":19,"url":"https://junglewise.ai/threats/vendors/payload-cms"},{"hub":true,"high":8,"name":"Plane","rank":9,"slug":"plane","critical":4,"exploited":0,"vulnerabilities":25,"url":"https://junglewise.ai/threats/vendors/plane"},{"hub":true,"high":9,"name":"MediaTek","rank":10,"slug":"mediatek","critical":0,"exploited":0,"vulnerabilities":31,"url":"https://junglewise.ai/threats/vendors/mediatek"}],"generated_at":"2026-10-13T00:07:00.15766+00:00","technologies":[{"hub":true,"top":[{"cve":"CVE-2026-106427","slug":"cve-2026-106427-confused-deputy-in-mobile-in-google-chrome-on-on-ios-prior-to","title":"Google Chrome confused deputy vulnerability in Mobile on iOS","severity":"info","exploited":false,"published_at":"2026-10-06T19:18:12.6+00:00","url":"https://junglewise.ai/threats/cve-2026-106427-confused-deputy-in-mobile-in-google-chrome-on-on-ios-prior-to"},{"cve":"CVE-2026-106426","slug":"cve-2026-106426-race-condition-in-fonts-in-google-chrome-prior-to-155-0-8059-39","title":"Google Chrome race condition in Fonts sandbox escape","severity":"info","exploited":false,"published_at":"2026-10-06T19:18:12.483+00:00","url":"https://junglewise.ai/threats/cve-2026-106426-race-condition-in-fonts-in-google-chrome-prior-to-155-0-8059-39"},{"cve":"CVE-2026-106425","slug":"cve-2026-106425-missing-authorization-in-browsertag-in-google-chrome-prior-to","title":"Google Chrome missing authorization in BrowserTag","severity":"info","exploited":false,"published_at":"2026-10-06T19:18:12.37+00:00","url":"https://junglewise.ai/threats/cve-2026-106425-missing-authorization-in-browsertag-in-google-chrome-prior-to"}],"high":0,"name":"Google Chrome","rank":1,"slug":"chrome","score":247,"vendor":{"name":"Google","slug":"google"},"critical":0,"max_cvss":null,"max_epss":null,"exploited":0,"vulnerabilities":247,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":true,"top":[{"cve":"CVE-2026-56906","cvss":7,"slug":"cve-2026-56906-in-ep-free-of-eventpoll-c-there-is-a-possible-use-after-free-due","title":"Linux kernel use-after-free in eventpoll","severity":"high","exploited":false,"published_at":"2026-10-06T19:18:14.92+00:00","url":"https://junglewise.ai/threats/cve-2026-56906-in-ep-free-of-eventpoll-c-there-is-a-possible-use-after-free-due"},{"cve":"CVE-2026-98372","slug":"cve-2026-98372-in-the-linux-kernel-the-following-vulnerability-has-been-resolved","title":"Linux kernel stack out-of-bounds read in xfrm iptfs","severity":"info","exploited":false,"published_at":"2026-10-06T09:18:31.743+00:00","url":"https://junglewise.ai/threats/cve-2026-98372-in-the-linux-kernel-the-following-vulnerability-has-been-resolved"},{"cve":"CVE-2026-98371","slug":"cve-2026-98371-in-the-linux-kernel-the-following-vulnerability-has-been-resolved","title":"Linux kernel xfrm iptfs denial of service via short inner tot_len","severity":"info","exploited":false,"published_at":"2026-10-06T09:18:31.613+00:00","url":"https://junglewise.ai/threats/cve-2026-98371-in-the-linux-kernel-the-following-vulnerability-has-been-resolved"}],"high":1,"name":"Linux Kernel","rank":2,"slug":"kernel","score":205,"vendor":{"name":"Linux","slug":"linux"},"critical":0,"max_cvss":7,"max_epss":null,"exploited":0,"vulnerabilities":203,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"top":[{"cve":"CVE-2026-93674","cvss":9.8,"slug":"cve-2026-93674-ibm-langflow-oss-1-0-0-through-1-12-2-could-allow-a-remote","title":"IBM Langflow OSS command injection in OS command execution","severity":"critical","exploited":false,"published_at":"2026-10-07T01:16:35.187+00:00","url":"https://junglewise.ai/threats/cve-2026-93674-ibm-langflow-oss-1-0-0-through-1-12-2-could-allow-a-remote"},{"cve":"CVE-2026-104334","cvss":9.8,"slug":"cve-2026-104334-ibm-langflow-oss-1-0-0-through-1-12-2-could-allow-a-remote","title":"IBM Langflow OSS code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-07T01:16:34.223+00:00","url":"https://junglewise.ai/threats/cve-2026-104334-ibm-langflow-oss-1-0-0-through-1-12-2-could-allow-a-remote"},{"cve":"CVE-2026-97679","cvss":8.8,"slug":"cve-2026-97679-ibm-langflow-oss-1-0-0-through-1-12-2-could-allow-a-remote","title":"IBM Langflow OSS code injection in OS command handling","severity":"high","exploited":false,"published_at":"2026-10-07T01:16:36.643+00:00","url":"https://junglewise.ai/threats/cve-2026-97679-ibm-langflow-oss-1-0-0-through-1-12-2-could-allow-a-remote"}],"high":18,"name":"IBM Langflow","rank":3,"slug":"langflow-oss","score":70,"vendor":{"name":"IBM","slug":"ibm"},"critical":2,"max_cvss":9.8,"max_epss":null,"exploited":0,"vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/langflow-oss"},{"hub":true,"top":[{"cve":"CVE-2026-105636","cvss":9.9,"slug":"cve-2026-105636-plane-is-an-open-source-project-management-tool-prior-to-1-4-0","title":"Plane webhook delivery SSRF via redirect bypass","severity":"critical","exploited":false,"published_at":"2026-10-05T19:17:17.693+00:00","url":"https://junglewise.ai/threats/cve-2026-105636-plane-is-an-open-source-project-management-tool-prior-to-1-4-0"},{"cve":"CVE-2026-105641","cvss":9.8,"slug":"cve-2026-105641-plane-is-an-open-source-project-management-tool-prior-to-1-4-0","title":"Plane hardcoded Django SECRET_KEY in community deployments","severity":"critical","exploited":false,"published_at":"2026-10-05T19:17:18.56+00:00","url":"https://junglewise.ai/threats/cve-2026-105641-plane-is-an-open-source-project-management-tool-prior-to-1-4-0"},{"cve":"CVE-2026-105639","cvss":9.8,"slug":"cve-2026-105639-plane-is-an-open-source-project-management-tool-prior-to-1-4-0","title":"Plane workspace invitation hijacking and token disclosure","severity":"critical","exploited":false,"published_at":"2026-10-05T19:17:18.213+00:00","url":"https://junglewise.ai/threats/cve-2026-105639-plane-is-an-open-source-project-management-tool-prior-to-1-4-0"}],"high":8,"name":"Plane","rank":4,"slug":"plane-plane","score":61,"vendor":{"name":"Plane","slug":"plane"},"critical":4,"max_cvss":9.9,"max_epss":null,"exploited":0,"vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/plane-plane"},{"hub":true,"top":[{"cve":"CVE-2026-105859","cvss":9.8,"epss":0.0035,"slug":"cve-2026-105859-payload-is-a-free-and-open-source-headless-content-management","title":"Payload CMS access control bypass in reorder endpoint","severity":"critical","exploited":false,"published_at":"2026-10-06T17:17:21.987+00:00","url":"https://junglewise.ai/threats/cve-2026-105859-payload-is-a-free-and-open-source-headless-content-management"},{"cve":"CVE-2026-105845","cvss":9.8,"slug":"cve-2026-105845-payload-is-a-free-and-open-source-headless-content-management","title":"Payload CMS SQL injection in dynamic filters","severity":"critical","exploited":false,"published_at":"2026-10-06T16:17:06.54+00:00","url":"https://junglewise.ai/threats/cve-2026-105845-payload-is-a-free-and-open-source-headless-content-management"},{"cve":"CVE-2026-105863","cvss":4,"epss":0.0039,"slug":"cve-2026-105863-payload-is-a-free-and-open-source-headless-content-management","title":"Payload CMS authentication token tampering via reserved JWT fields","severity":"critical","exploited":false,"published_at":"2026-10-06T17:17:22.57+00:00","url":"https://junglewise.ai/threats/cve-2026-105863-payload-is-a-free-and-open-source-headless-content-management"}],"high":8,"name":"Payload CMS Payload","rank":5,"slug":"payload-cms-payload","score":57,"vendor":{"name":"Payload CMS","slug":"payload-cms"},"critical":5,"max_cvss":9.8,"max_epss":0.0039,"exploited":0,"vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/payload-cms-payload"},{"hub":true,"top":[{"cve":"CVE-2026-105859","cvss":9.8,"epss":0.0035,"slug":"cve-2026-105859-payload-is-a-free-and-open-source-headless-content-management","title":"Payload CMS access control bypass in reorder endpoint","severity":"critical","exploited":false,"published_at":"2026-10-06T17:17:21.987+00:00","url":"https://junglewise.ai/threats/cve-2026-105859-payload-is-a-free-and-open-source-headless-content-management"},{"cve":"CVE-2026-105845","cvss":9.8,"slug":"cve-2026-105845-payload-is-a-free-and-open-source-headless-content-management","title":"Payload CMS SQL injection in dynamic filters","severity":"critical","exploited":false,"published_at":"2026-10-06T16:17:06.54+00:00","url":"https://junglewise.ai/threats/cve-2026-105845-payload-is-a-free-and-open-source-headless-content-management"},{"cve":"CVE-2026-105863","cvss":4,"epss":0.0039,"slug":"cve-2026-105863-payload-is-a-free-and-open-source-headless-content-management","title":"Payload CMS authentication token tampering via reserved JWT fields","severity":"critical","exploited":false,"published_at":"2026-10-06T17:17:22.57+00:00","url":"https://junglewise.ai/threats/cve-2026-105863-payload-is-a-free-and-open-source-headless-content-management"}],"high":10,"name":"payload (npm)","rank":6,"slug":"payload","score":53,"vendor":{"name":"npm","slug":"npm"},"critical":3,"max_cvss":9.8,"max_epss":0.0048,"exploited":0,"vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/payload"},{"hub":true,"top":[{"cve":"CVE-2026-102159","cvss":9.8,"slug":"cve-2026-102159-an-access-control-flaw-in-the-cv-cue-backend-may-allow-an","title":"Arista CloudVision-CUE access control bypass in backend","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:10.963+00:00","url":"https://junglewise.ai/threats/cve-2026-102159-an-access-control-flaw-in-the-cv-cue-backend-may-allow-an"},{"cve":"CVE-2026-101155","cvss":9.1,"slug":"cve-2026-101155-an-authenticated-remote-attacker-with-specific-permissions-can","title":"Arista CloudVision Portal path traversal in software repository","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:09.703+00:00","url":"https://junglewise.ai/threats/cve-2026-101155-an-authenticated-remote-attacker-with-specific-permissions-can"},{"cve":"CVE-2026-102161","cvss":8.8,"slug":"cve-2026-102161-an-unauthenticated-attacker-located-on-an-adjacent-private","title":"Arista CloudVision CUE authentication bypass via IP spoofing","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:11.23+00:00","url":"https://junglewise.ai/threats/cve-2026-102161-an-unauthenticated-attacker-located-on-an-adjacent-private"}],"high":9,"name":"Arista CloudVision Portal","rank":7,"slug":"cloudvision-portal","score":45,"vendor":{"name":"Arista","slug":"arista"},"critical":2,"max_cvss":9.8,"max_epss":null,"exploited":0,"vulnerabilities":17,"url":"https://junglewise.ai/threats/technologies/cloudvision-portal"},{"hub":true,"top":[{"cve":"CVE-2026-63692","cvss":10,"slug":"cve-2026-63692-dell-container-storage-modules-versions-prior-to-1-18-0-contain-s","title":"Dell Container Storage Modules missing authentication in gRPC services","severity":"critical","exploited":false,"published_at":"2026-10-06T15:17:19.007+00:00","url":"https://junglewise.ai/threats/cve-2026-63692-dell-container-storage-modules-versions-prior-to-1-18-0-contain-s"},{"cve":"CVE-2026-63688","cvss":10,"slug":"cve-2026-63688-dell-container-storage-modules-csm-versions-prior-to-v1-18-0","title":"Dell Container Storage Modules missing authentication in gRPC server","severity":"critical","exploited":false,"published_at":"2026-10-06T15:17:18.89+00:00","url":"https://junglewise.ai/threats/cve-2026-63688-dell-container-storage-modules-csm-versions-prior-to-v1-18-0"},{"cve":"CVE-2026-61421","cvss":9.8,"slug":"cve-2026-61421-dell-container-storage-modules-versions-prior-to-1-18-0-contain-s","title":"Dell Container Storage Modules hard-coded credentials in CSM Authorization","severity":"critical","exploited":false,"published_at":"2026-10-06T15:17:18.767+00:00","url":"https://junglewise.ai/threats/cve-2026-61421-dell-container-storage-modules-versions-prior-to-1-18-0-contain-s"}],"high":4,"name":"Dell Container Storage Modules","rank":8,"slug":"container-storage-modules","score":44,"vendor":{"name":"Dell","slug":"dell"},"critical":5,"max_cvss":10,"max_epss":null,"exploited":0,"vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/container-storage-modules"},{"hub":true,"top":[{"cve":"CVE-2026-79805","cvss":9.8,"slug":"cve-2026-79805-an-authenticated-path-traversal-vulnerability-exists-in-clearpass","title":"HPE ClearPass Policy Manager authenticated path traversal","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:32.013+00:00","url":"https://junglewise.ai/threats/cve-2026-79805-an-authenticated-path-traversal-vulnerability-exists-in-clearpass"},{"cve":"CVE-2026-76753","cvss":9.8,"slug":"cve-2026-76753-a-format-string-vulnerability-in-an-affected-service-interface-of","title":"HPE ClearPass Policy Manager format string vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.74+00:00","url":"https://junglewise.ai/threats/cve-2026-76753-a-format-string-vulnerability-in-an-affected-service-interface-of"},{"cve":"CVE-2026-76752","cvss":9.8,"slug":"cve-2026-76752-authentication-bypass-vulnerabilities-exist-in-the-web-based","title":"HPE ClearPass Policy Manager authentication bypass","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.623+00:00","url":"https://junglewise.ai/threats/cve-2026-76752-authentication-bypass-vulnerabilities-exist-in-the-web-based"}],"high":4,"name":"Hpe ClearPass Policy Manager","rank":9,"slug":"hpe-clearpass-policy-manager","score":40,"vendor":{"name":"Hpe","slug":"hpe"},"critical":4,"max_cvss":9.8,"max_epss":null,"exploited":0,"vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager"},{"hub":true,"top":[{"cve":"CVE-2026-105642","cvss":8.8,"epss":0.0025,"slug":"cve-2026-105642-ghost-is-a-node-js-content-management-system-from-6-56-0-until-6","title":"Ghost remote code execution via bookmark card images","severity":"high","exploited":false,"published_at":"2026-10-05T19:17:18.733+00:00","url":"https://junglewise.ai/threats/cve-2026-105642-ghost-is-a-node-js-content-management-system-from-6-56-0-until-6"},{"cve":"CVE-2026-105650","cvss":8.1,"epss":0.0033,"slug":"cve-2026-105650-ghost-is-a-node-js-content-management-system-from-2-1-0-until-6","title":"Ghost CMS stored XSS via oEmbed photo URLs","severity":"high","exploited":false,"published_at":"2026-10-05T20:17:13.817+00:00","url":"https://junglewise.ai/threats/cve-2026-105650-ghost-is-a-node-js-content-management-system-from-2-1-0-until-6"},{"cve":"CVE-2026-105675","cvss":7.5,"epss":0.0039,"slug":"cve-2026-105675-ghost-is-a-node-js-content-management-system-from-4-39-0-until-6","title":"Ghost privilege escalation via staff invite token disclosure","severity":"high","exploited":false,"published_at":"2026-10-05T20:17:14.367+00:00","url":"https://junglewise.ai/threats/cve-2026-105675-ghost-is-a-node-js-content-management-system-from-4-39-0-until-6"}],"high":8,"name":"ghost (npm)","rank":10,"slug":"ghost","score":36,"vendor":{"name":"npm","slug":"npm"},"critical":0,"max_cvss":8.8,"max_epss":0.0052,"exploited":0,"vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/ghost"},{"hub":true,"top":[{"cve":"CVE-2026-105637","cvss":9.6,"slug":"cve-2026-105637-plane-is-an-open-source-project-management-tool-prior-to-1-4-0","title":"Plane project management asset IDOR in bulk-asset endpoint","severity":"critical","exploited":false,"published_at":"2026-10-05T19:17:17.86+00:00","url":"https://junglewise.ai/threats/cve-2026-105637-plane-is-an-open-source-project-management-tool-prior-to-1-4-0"},{"cve":"CVE-2026-105640","cvss":9.1,"slug":"cve-2026-105640-plane-is-an-open-source-project-management-tool-prior-to-1-4-0","title":"Plane account takeover via unverified OAuth email","severity":"critical","exploited":false,"published_at":"2026-10-05T19:17:18.383+00:00","url":"https://junglewise.ai/threats/cve-2026-105640-plane-is-an-open-source-project-management-tool-prior-to-1-4-0"},{"cve":"CVE-2026-105630","cvss":8.7,"slug":"cve-2026-105630-plane-is-an-open-source-project-management-tool-prior-to-1-4-0","title":"Plane stored XSS via SVG attachment inline serving","severity":"high","exploited":false,"published_at":"2026-10-05T18:17:36.25+00:00","url":"https://junglewise.ai/threats/cve-2026-105630-plane-is-an-open-source-project-management-tool-prior-to-1-4-0"}],"high":7,"name":"Makeplane Plane","rank":11,"slug":"plane","score":36,"vendor":{"name":"Makeplane","slug":"makeplane"},"critical":2,"max_cvss":9.6,"max_epss":null,"exploited":0,"vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/plane"},{"hub":true,"top":[{"cve":"CVE-2026-62376","cvss":8.1,"epss":0.0022,"slug":"cve-2026-62376-vikunja-plaintext-storage-of-password-reset-email-confirm-tokens","title":"Vikunja plaintext storage of authentication tokens in database","severity":"high","exploited":false,"published_at":"2026-10-09T20:49:13+00:00","url":"https://junglewise.ai/threats/cve-2026-62376-vikunja-plaintext-storage-of-password-reset-email-confirm-tokens"},{"cve":"CVE-2026-57458","cvss":8.1,"epss":0.0027,"slug":"cve-2026-57458-vikunja-scoped-api-token-can-mint-unrestricted-oauth-session","title":"Vikunja scoped API token permission bypass in OAuth","severity":"high","exploited":false,"published_at":"2026-10-09T20:40:28+00:00","url":"https://junglewise.ai/threats/cve-2026-57458-vikunja-scoped-api-token-can-mint-unrestricted-oauth-session"},{"cve":"CVE-2026-76216","cvss":7.5,"epss":0.0036,"slug":"cve-2026-76216-vikunja-link-share-principal-type-confusion-enables-cross-account","title":"Vikunja link-share principal-type confusion in permission checks","severity":"high","exploited":false,"published_at":"2026-10-09T20:43:40+00:00","url":"https://junglewise.ai/threats/cve-2026-76216-vikunja-link-share-principal-type-confusion-enables-cross-account"}],"high":5,"name":"code.vikunja.io/api (Go)","rank":12,"slug":"code-vikunja-io-api","score":34,"vendor":{"name":"Go","slug":"go"},"critical":0,"max_cvss":8.1,"max_epss":0.0036,"exploited":0,"vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/code-vikunja-io-api"},{"hub":true,"top":[{"cve":"CVE-2026-107212","cvss":7.5,"epss":0.0034,"slug":"cve-2026-107212-excelize-unbounded-row-number-in-rows-columns-makes-getrows-and","title":"Excelize unbounded row iteration denial of service","severity":"high","exploited":false,"published_at":"2026-10-08T16:50:13+00:00","url":"https://junglewise.ai/threats/cve-2026-107212-excelize-unbounded-row-number-in-rows-columns-makes-getrows-and"},{"cve":"CVE-2026-107214","cvss":7.5,"epss":0.0027,"slug":"cve-2026-107214-excelize-decrypt-unrecoverable-panics-on-malformed-ole-cfb","title":"Excelize Decrypt panic on malformed OLE encrypted workbooks","severity":"high","exploited":false,"published_at":"2026-10-08T16:31:32+00:00","url":"https://junglewise.ai/threats/cve-2026-107214-excelize-decrypt-unrecoverable-panics-on-malformed-ole-cfb"},{"cve":"CVE-2026-107215","cvss":7.5,"epss":0.0022,"slug":"cve-2026-107215-excelize-extractpart-allocates-attacker-controlled-unbounded-and","title":"Excelize extractPart unbounded buffer allocation DoS","severity":"high","exploited":false,"published_at":"2026-10-08T16:31:26+00:00","url":"https://junglewise.ai/threats/cve-2026-107215-excelize-extractpart-allocates-attacker-controlled-unbounded-and"}],"high":9,"name":"github.com/xuri/excelize/v2 (Go)","rank":13,"slug":"github-com-xuri-excelize-v2","score":33,"vendor":{"name":"Go","slug":"go"},"critical":0,"max_cvss":7.5,"max_epss":0.0036,"exploited":0,"vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/github-com-xuri-excelize-v2"},{"hub":true,"top":[{"cve":"CVE-2026-107806","cvss":4,"epss":0.0033,"slug":"cve-2026-107806-nginx-ui-authenticated-remote-code-execution-via-backup-restore","title":"Nginx UI authenticated remote code execution via backup restore","severity":"critical","exploited":false,"published_at":"2026-10-09T20:45:02+00:00","url":"https://junglewise.ai/threats/cve-2026-107806-nginx-ui-authenticated-remote-code-execution-via-backup-restore"},{"cve":"CVE-2026-107809","cvss":8.8,"epss":0.0019,"slug":"cve-2026-107809-nginx-ui-authrequired-token-cookie-fallback-enables-csrf-against","title":"Nginx-UI cross-site request forgery via auth cookie fallback","severity":"high","exploited":false,"published_at":"2026-10-09T17:08:10+00:00","url":"https://junglewise.ai/threats/cve-2026-107809-nginx-ui-authrequired-token-cookie-fallback-enables-csrf-against"},{"cve":"CVE-2026-107813","cvss":8.8,"epss":0.0031,"slug":"cve-2026-107813-nginx-ui-incomplete-fix-of-the-api-cluster-router-was-not","title":"Nginx UI incomplete fix of authentication bypass in cluster router","severity":"high","exploited":false,"published_at":"2026-10-09T17:08:06+00:00","url":"https://junglewise.ai/threats/cve-2026-107813-nginx-ui-incomplete-fix-of-the-api-cluster-router-was-not"}],"high":8,"name":"github.com/0xJacky/Nginx-UI (Go)","rank":14,"slug":"github-com-0xjacky-nginx-ui","score":31,"vendor":{"name":"Go","slug":"go"},"critical":1,"max_cvss":8.8,"max_epss":0.0044,"exploited":0,"vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/github-com-0xjacky-nginx-ui"},{"hub":true,"top":[{"cve":"CVE-2026-97626","slug":"cve-2026-97626-requesting-a-user-or-organization-profile-page-get-username-with","title":"Gitea profile feed visibility bypass via RSS/Atom Accept header","severity":"info","exploited":false,"published_at":"2026-10-06T22:17:08.047+00:00","url":"https://junglewise.ai/threats/cve-2026-97626-requesting-a-user-or-organization-profile-page-get-username-with"},{"cve":"CVE-2026-97208","slug":"cve-2026-97208-the-gitea-api-endpoint-for-creating-push-mirrors-post-api-v1","title":"Gitea API push mirror authorization bypass in configuration enforcement","severity":"info","exploited":false,"published_at":"2026-10-06T22:17:07.927+00:00","url":"https://junglewise.ai/threats/cve-2026-97208-the-gitea-api-endpoint-for-creating-push-mirrors-post-api-v1"},{"cve":"CVE-2026-96594","slug":"cve-2026-96594-the-gitea-api-endpoint-get-api-v1-repos-owner-repo-media-filepath","title":"Gitea stored XSS in media API endpoint","severity":"info","exploited":false,"published_at":"2026-10-06T22:17:07.81+00:00","url":"https://junglewise.ai/threats/cve-2026-96594-the-gitea-api-endpoint-get-api-v1-repos-owner-repo-media-filepath"}],"high":0,"name":"Gitea","rank":15,"slug":"gitea","score":30,"vendor":{"name":"Gitea","slug":"gitea"},"critical":0,"max_cvss":null,"max_epss":null,"exploited":0,"vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/gitea"},{"hub":true,"top":[{"cve":"CVE-2026-58865","cvss":7.5,"slug":"cve-2026-58865-in-multiple-functions-of-pduparser-java-there-is-a-possible","title":"Android Framework denial of service in PduParser","severity":"high","exploited":false,"published_at":"2026-10-05T19:17:25.183+00:00","url":"https://junglewise.ai/threats/cve-2026-58865-in-multiple-functions-of-pduparser-java-there-is-a-possible"},{"cve":"CVE-2026-25270","cvss":6.7,"slug":"cve-2026-25270-memory-corruption-when-processing-command-buffer-requests-with","title":"Android Camera driver memory corruption in command buffer processing","severity":"medium","exploited":false,"published_at":"2026-10-06T07:16:57.367+00:00","url":"https://junglewise.ai/threats/cve-2026-25270-memory-corruption-when-processing-command-buffer-requests-with"},{"cve":"CVE-2026-0198","cvss":4.4,"slug":"cve-2026-0198-in-is-pd-allowed-of-gem-msg-c-there-is-a-possible-permission","title":"Android GDMC permission bypass in gem_msg.c","severity":"medium","exploited":false,"published_at":"2026-10-06T19:17:38.007+00:00","url":"https://junglewise.ai/threats/cve-2026-0198-in-is-pd-allowed-of-gem-msg-c-there-is-a-possible-permission"}],"high":1,"name":"Google Android","rank":16,"slug":"android","score":29,"vendor":{"name":"Google","slug":"google"},"critical":0,"max_cvss":7.5,"max_epss":null,"exploited":0,"vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/android"},{"hub":true,"top":[{"cve":"CVE-2026-62376","cvss":8.1,"epss":0.0022,"slug":"cve-2026-62376-vikunja-plaintext-storage-of-password-reset-email-confirm-tokens","title":"Vikunja plaintext storage of authentication tokens in database","severity":"high","exploited":false,"published_at":"2026-10-09T20:49:13+00:00","url":"https://junglewise.ai/threats/cve-2026-62376-vikunja-plaintext-storage-of-password-reset-email-confirm-tokens"},{"cve":"CVE-2026-57458","cvss":8.1,"epss":0.0027,"slug":"cve-2026-57458-vikunja-scoped-api-token-can-mint-unrestricted-oauth-session","title":"Vikunja scoped API token permission bypass in OAuth","severity":"high","exploited":false,"published_at":"2026-10-09T20:40:28+00:00","url":"https://junglewise.ai/threats/cve-2026-57458-vikunja-scoped-api-token-can-mint-unrestricted-oauth-session"},{"cve":"CVE-2026-76216","cvss":7.5,"epss":0.0036,"slug":"cve-2026-76216-vikunja-link-share-principal-type-confusion-enables-cross-account","title":"Vikunja link-share principal-type confusion in permission checks","severity":"high","exploited":false,"published_at":"2026-10-09T20:43:40+00:00","url":"https://junglewise.ai/threats/cve-2026-76216-vikunja-link-share-principal-type-confusion-enables-cross-account"}],"high":5,"name":"Vikunja","rank":17,"slug":"vikunja","score":29,"vendor":{"name":"Vikunja","slug":"vikunja"},"critical":0,"max_cvss":8.1,"max_epss":0.0036,"exploited":0,"vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/vikunja"},{"hub":true,"top":[{"cve":"CVE-2026-105812","cvss":9,"slug":"cve-2026-105812-and-issue-with-bedrock-agentcore-starter-toolkit-import-agent","title":"Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow","severity":"critical","exploited":false,"published_at":"2026-10-06T21:17:04.6+00:00","url":"https://junglewise.ai/threats/cve-2026-105812-and-issue-with-bedrock-agentcore-starter-toolkit-import-agent"},{"cve":"CVE-2026-105811","cvss":6.5,"slug":"cve-2026-105811-authorization-bypass-through-a-user-controlled-key-in-the","title":"AWS QnABot authorization bypass in Lambda hook sample","severity":"high","exploited":false,"published_at":"2026-10-06T21:17:04.447+00:00","url":"https://junglewise.ai/threats/cve-2026-105811-authorization-bypass-through-a-user-controlled-key-in-the"},{"cve":"CVE-2026-108096","slug":"cve-2026-108096-improper-authorization-in-query-resolvers-for-sql-backed-models","title":"AWS Amplify API Category improper authorization in query resolvers","severity":"high","exploited":false,"published_at":"2026-10-09T18:13:24+00:00","url":"https://junglewise.ai/threats/cve-2026-108096-improper-authorization-in-query-resolvers-for-sql-backed-models"}],"high":7,"name":"Amazon AWS","rank":18,"slug":"aws","score":27,"vendor":{"name":"Amazon","slug":"amazon"},"critical":1,"max_cvss":9,"max_epss":null,"exploited":0,"vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/aws"},{"hub":true,"top":[{"cvss":8.1,"slug":"pyload-ng-getuserdata-get-userdata-exposed-at-perms-any-allow-any-cd197c9d","title":"pyload-ng authentication bypass in getUserData/get_userdata","severity":"high","exploited":false,"published_at":"2026-10-09T17:09:15+00:00","url":"https://junglewise.ai/threats/pyload-ng-getuserdata-get-userdata-exposed-at-perms-any-allow-any-cd197c9d"},{"cvss":8.1,"slug":"pyload-has-an-authentication-bypass-in-api-key-validation-check-apikey-cccaaa7b","title":"pyLoad API key authentication bypass in cache validation","severity":"high","exploited":false,"published_at":"2026-10-09T16:43:55+00:00","url":"https://junglewise.ai/threats/pyload-has-an-authentication-bypass-in-api-key-validation-check-apikey-cccaaa7b"},{"cvss":7.5,"slug":"pyload-privilege-revocation-and-password-change-through-the-rest-api-do-8e7301ba","title":"pyLoad session invalidation bypass in privilege revocation and password change","severity":"high","exploited":false,"published_at":"2026-10-09T17:09:09+00:00","url":"https://junglewise.ai/threats/pyload-privilege-revocation-and-password-change-through-the-rest-api-do-8e7301ba"}],"high":5,"name":"pyload-ng (PyPI)","rank":19,"slug":"pyload-ng","score":26,"vendor":{"name":"PyPI","slug":"pypi"},"critical":0,"max_cvss":8.1,"max_epss":0.0031,"exploited":0,"vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/pyload-ng"},{"hub":true,"top":[{"cvss":7.5,"slug":"cve-2026-107826-coraza-json-body-processor-argument-limit-truncation-reopens-an","title":"Coraza JSON body processor stack overflow in gjson.Valid","severity":"high","exploited":false,"published_at":"2026-10-08T17:45:46+00:00","url":"https://junglewise.ai/threats/cve-2026-107826-coraza-json-body-processor-argument-limit-truncation-reopens-an"},{"cve":"CVE-2026-41510","cvss":7.2,"slug":"cve-2026-41510-coraza-silent-argument-drop-at-argumentlimit-allows-bypass-of","title":"Coraza WAF argument limit bypass via parameter flooding","severity":"high","exploited":false,"published_at":"2026-10-06T20:38:03+00:00","url":"https://junglewise.ai/threats/cve-2026-41510-coraza-silent-argument-drop-at-argumentlimit-allows-bypass-of"},{"cvss":5.9,"slug":"cve-2026-107833-coraza-unbounded-recursion-in-json-response-body-processor","title":"Coraza unbounded recursion in JSON response processor","severity":"medium","exploited":false,"published_at":"2026-10-08T17:51:42+00:00","url":"https://junglewise.ai/threats/cve-2026-107833-coraza-unbounded-recursion-in-json-response-body-processor"}],"high":2,"name":"github.com/corazawaf/coraza/v3 (Go)","rank":20,"slug":"github-com-corazawaf-coraza-v3","score":24,"vendor":{"name":"Go","slug":"go"},"critical":0,"max_cvss":7.5,"max_epss":0.0046,"exploited":0,"vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/github-com-corazawaf-coraza-v3"},{"hub":true,"top":[{"cve":"CVE-2026-79796","cvss":9.8,"slug":"cve-2026-79796-vulnerabilities-have-been-identified-in-the-affected-interface-of","title":"Aruba ClearPass Policy Manager authentication bypass","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:31.083+00:00","url":"https://junglewise.ai/threats/cve-2026-79796-vulnerabilities-have-been-identified-in-the-affected-interface-of"},{"cve":"CVE-2026-76754","cvss":9.8,"slug":"cve-2026-76754-a-vulnerability-in-an-affected-interface-of-clearpass-policy","title":"Aruba ClearPass Policy Manager SQL injection","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.853+00:00","url":"https://junglewise.ai/threats/cve-2026-76754-a-vulnerability-in-an-affected-interface-of-clearpass-policy"},{"cve":"CVE-2026-76751","cvss":9.8,"slug":"cve-2026-76751-a-missing-integrity-verification-vulnerability-exists-in-the","title":"Aruba ClearPass Policy Manager OnGuard agent code execution","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.513+00:00","url":"https://junglewise.ai/threats/cve-2026-76751-a-missing-integrity-verification-vulnerability-exists-in-the"}],"high":2,"name":"Aruba ClearPass Policy Manager","rank":21,"slug":"aruba-clearpass-policy-manager","score":24,"vendor":{"name":"Aruba","slug":"aruba"},"critical":3,"max_cvss":9.8,"max_epss":null,"exploited":0,"vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/aruba-clearpass-policy-manager"},{"hub":true,"top":[{"cve":"CVE-2026-105650","cvss":8.1,"epss":0.0033,"slug":"cve-2026-105650-ghost-is-a-node-js-content-management-system-from-2-1-0-until-6","title":"Ghost CMS stored XSS via oEmbed photo URLs","severity":"high","exploited":false,"published_at":"2026-10-05T20:17:13.817+00:00","url":"https://junglewise.ai/threats/cve-2026-105650-ghost-is-a-node-js-content-management-system-from-2-1-0-until-6"},{"cve":"CVE-2026-105675","cvss":7.5,"epss":0.0039,"slug":"cve-2026-105675-ghost-is-a-node-js-content-management-system-from-4-39-0-until-6","title":"Ghost privilege escalation via staff invite token disclosure","severity":"high","exploited":false,"published_at":"2026-10-05T20:17:14.367+00:00","url":"https://junglewise.ai/threats/cve-2026-105675-ghost-is-a-node-js-content-management-system-from-4-39-0-until-6"},{"cve":"CVE-2026-105651","cvss":7.3,"epss":0.003,"slug":"cve-2026-105651-ghost-is-a-node-js-content-management-system-from-5-94-0-until-6","title":"Ghost CMS arbitrary file storage in bookmark cards","severity":"high","exploited":false,"published_at":"2026-10-05T20:17:14.01+00:00","url":"https://junglewise.ai/threats/cve-2026-105651-ghost-is-a-node-js-content-management-system-from-5-94-0-until-6"}],"high":6,"name":"Ghost","rank":22,"slug":"ghost-ghost","score":23,"vendor":{"name":"Ghost","slug":"ghost"},"critical":0,"max_cvss":8.1,"max_epss":0.0052,"exploited":0,"vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/ghost-ghost"},{"hub":true,"top":[{"cve":"CVE-2026-106118","cvss":7.5,"epss":0.006,"slug":"cve-2026-106118-imagesharp-is-a-2d-graphics-library-from-3-0-0-until-4-1-1-tiled","title":"SixLabors ImageSharp TIFF heap overflow in tiled CCITT decompression","severity":"high","exploited":false,"published_at":"2026-10-06T19:17:42.64+00:00","url":"https://junglewise.ai/threats/cve-2026-106118-imagesharp-is-a-2d-graphics-library-from-3-0-0-until-4-1-1-tiled"},{"cve":"CVE-2026-106117","cvss":7.5,"epss":0.0043,"slug":"cve-2026-106117-imagesharp-is-a-2d-graphics-library-from-3-0-0-until-4-1-1","title":"ImageSharp buffer overflow in CCITT TIFF decompression","severity":"high","exploited":false,"published_at":"2026-10-06T18:16:53.55+00:00","url":"https://junglewise.ai/threats/cve-2026-106117-imagesharp-is-a-2d-graphics-library-from-3-0-0-until-4-1-1"},{"cve":"CVE-2026-106115","cvss":7.5,"epss":0.0035,"slug":"cve-2026-106115-imagesharp-is-a-2d-graphics-library-from-2-1-0-until-4-1-2-the","title":"ImageSharp TIFF CCITT Group 4 encoder buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-06T18:16:53.25+00:00","url":"https://junglewise.ai/threats/cve-2026-106115-imagesharp-is-a-2d-graphics-library-from-2-1-0-until-4-1-2-the"}],"high":6,"name":"SixLabors ImageSharp","rank":23,"slug":"imagesharp","score":21,"vendor":{"name":"SixLabors","slug":"sixlabors"},"critical":0,"max_cvss":7.5,"max_epss":0.006,"exploited":0,"vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/imagesharp"},{"hub":true,"top":[{"cve":"CVE-2026-105232","cvss":7.3,"epss":0.0026,"slug":"cve-2026-105232-a-flaw-has-been-found-in-kishor-23-food-waste-management-system","title":"food-waste-management-system SQL injection in registration page","severity":"high","exploited":false,"published_at":"2026-10-05T06:16:57.61+00:00","url":"https://junglewise.ai/threats/cve-2026-105232-a-flaw-has-been-found-in-kishor-23-food-waste-management-system"},{"cve":"CVE-2026-105231","cvss":7.3,"epss":0.0026,"slug":"cve-2026-105231-a-vulnerability-was-detected-in-kishor-23-food-waste-management","title":"Food Waste Management System SQL injection in admin registration","severity":"high","exploited":false,"published_at":"2026-10-05T06:16:57.41+00:00","url":"https://junglewise.ai/threats/cve-2026-105231-a-vulnerability-was-detected-in-kishor-23-food-waste-management"},{"cve":"CVE-2026-105230","cvss":7.3,"epss":0.0026,"slug":"cve-2026-105230-a-security-vulnerability-has-been-detected-in-kishor-23-food","title":"food-waste-management-system SQL injection in delivery order handling","severity":"high","exploited":false,"published_at":"2026-10-05T06:16:56.12+00:00","url":"https://junglewise.ai/threats/cve-2026-105230-a-security-vulnerability-has-been-detected-in-kishor-23-food"}],"high":6,"name":"Kishor-23 Food-Waste-Management-System","rank":24,"slug":"food-waste-management-system","score":21,"vendor":{"name":"Kishor-23","slug":"kishor-23"},"critical":0,"max_cvss":7.3,"max_epss":0.004,"exploited":0,"vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/food-waste-management-system"},{"hub":true,"top":[{"cve":"CVE-2026-105697","cvss":9.9,"epss":0.004,"slug":"cve-2026-105697-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow MCP stdio command injection","severity":"critical","exploited":false,"published_at":"2026-10-05T21:16:35.087+00:00","url":"https://junglewise.ai/threats/cve-2026-105697-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"cve":"CVE-2026-9205","cvss":9.1,"epss":0.003,"slug":"cve-2026-9205-langflow-weak-fernet-key-via-random-seed","title":"Langflow weak Fernet key derivation via random.seed()","severity":"critical","exploited":false,"published_at":"2026-10-05T22:31:35+00:00","url":"https://junglewise.ai/threats/cve-2026-9205-langflow-weak-fernet-key-via-random-seed"},{"cve":"CVE-2026-105741","cvss":7.1,"epss":0.0021,"slug":"cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow IP spoofing in MCP configuration installation","severity":"high","exploited":false,"published_at":"2026-10-05T21:16:35.74+00:00","url":"https://junglewise.ai/threats/cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"}],"high":2,"name":"langflow (PyPI)","rank":25,"slug":"pypi-langflow","score":21,"vendor":{"name":"PyPI","slug":"pypi"},"critical":2,"max_cvss":9.9,"max_epss":0.004,"exploited":0,"vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/pypi-langflow"}],"previous":{"key":"2026-09-28","top":"Google Chrome","period":{"end":"2026-10-04","start":"2026-09-28"},"totals":{"high":851,"tracked":3325,"critical":209,"exploited":6,"technologies":1544,"vulnerabilities":2669},"url":"https://junglewise.ai/threats/weekly/2026-09-28"},"next":{"key":"2026-10-12","top":"Microsoft Windows","period":{"end":"2026-10-18","start":"2026-10-12"},"totals":{"high":1770,"tracked":9509,"critical":274,"exploited":5,"technologies":2047,"vulnerabilities":4638},"url":"https://junglewise.ai/threats/weekly/2026-10-12"}}