{"schema_version":1,"title":"Most vulnerable technologies: week of 12 to 18 October 2026 (week 42)","summary":"In the week of 12 to 18 October 2026, Junglewise Threat Intelligence recorded 4,638 new vulnerabilities: 274 critical, 1,770 high and 5 exploited in the wild. The most vulnerable technology was Microsoft Windows, with 618 vulnerabilities (20 critical, 1 exploited in the wild), followed by Microsoft Windows Server 2025 (212) and Microsoft Windows 11 26h2 (197).","url":"https://junglewise.ai/threats/weekly/2026-10-12","json_url":"https://junglewise.ai/threats/weekly/2026-10-12.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/weekly/2026-10-12","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"Technologies are ranked by 10 points per vulnerability exploited in the wild, 5 per critical, 2 per high and 1 per vulnerability, over vulnerabilities published in the period (UTC). A vulnerability counts for every technology it affects.","kind":"week","period":{"end":"2026-10-18","start":"2026-10-12"},"totals":{"high":1770,"tracked":9509,"critical":274,"exploited":5,"technologies":2047,"vulnerabilities":4638},"notable":[{"cve":"CVE-2026-102764","cvss":9.8,"epss":0.006,"slug":"cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing","title":"BeyondTrust Remote Support authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-15T21:17:00.117+00:00","url":"https://junglewise.ai/threats/cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing"},{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-104935","cvss":8.6,"epss":0.2598,"slug":"cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing","title":"Ivanti Connect Secure authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-13T16:17:11.64+00:00","url":"https://junglewise.ai/threats/cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing"},{"cve":"CVE-2026-0322","slug":"cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability","title":"Palo Alto Networks PAN-OS code injection vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability"},{"cve":"CVE-2026-76519","slug":"cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability","title":"Cisco Secure Email Gateway relative path traversal","severity":"critical","exploited":true,"published_at":"2026-10-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability"},{"cve":"CVE-2026-108804","cvss":10,"epss":0.0239,"slug":"cve-2026-108804-a-vulnerability-was-detected-in-trendnet-tew-751dr-tew-752dru","title":"TRENDnet TEW-751DR/TEW-752DRU/TEW-733GR OS command injection in web management","severity":"critical","exploited":false,"published_at":"2026-10-12T06:16:59.457+00:00","url":"https://junglewise.ai/threats/cve-2026-108804-a-vulnerability-was-detected-in-trendnet-tew-751dr-tew-752dru"},{"cve":"CVE-2026-109110","cvss":10,"epss":0.0203,"slug":"cve-2026-109110-a-flaw-has-been-found-in-wavlink-wl-wn592ax6-250422-this-issue","title":"Wavlink WL-WN592AX6 OS command injection in wmapd daemon","severity":"critical","exploited":false,"published_at":"2026-10-13T09:17:15.37+00:00","url":"https://junglewise.ai/threats/cve-2026-109110-a-flaw-has-been-found-in-wavlink-wl-wn592ax6-250422-this-issue"},{"cve":"CVE-2026-108918","cvss":10,"epss":0.0203,"slug":"cve-2026-108918-a-vulnerability-was-identified-in-edimax-br-6208ac-1-32-impacted","title":"Edimax BR-6208AC command injection in /goform/formWlanMP","severity":"critical","exploited":false,"published_at":"2026-10-12T18:17:22.353+00:00","url":"https://junglewise.ai/threats/cve-2026-108918-a-vulnerability-was-identified-in-edimax-br-6208ac-1-32-impacted"},{"cve":"CVE-2026-108917","cvss":10,"epss":0.0199,"slug":"cve-2026-108917-a-vulnerability-was-determined-in-edimax-br-6208ac-1-32-this","title":"Edimax BR-6208AC command injection in /goform/formAutoFWupgrade","severity":"critical","exploited":false,"published_at":"2026-10-12T18:17:22.163+00:00","url":"https://junglewise.ai/threats/cve-2026-108917-a-vulnerability-was-determined-in-edimax-br-6208ac-1-32-this"},{"cve":"CVE-2026-108907","cvss":10,"epss":0.0123,"slug":"cve-2026-108907-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109","title":"Netcore NR268 authentication bypass in CGI execution","severity":"critical","exploited":false,"published_at":"2026-10-12T17:17:13.373+00:00","url":"https://junglewise.ai/threats/cve-2026-108907-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109"}],"vendors":[{"hub":true,"high":805,"name":"Microsoft","rank":1,"slug":"microsoft","critical":47,"exploited":1,"vulnerabilities":1159,"url":"https://junglewise.ai/threats/vendors/microsoft"},{"hub":true,"high":4,"name":"Linux","rank":2,"slug":"linux","critical":0,"exploited":0,"vulnerabilities":442,"url":"https://junglewise.ai/threats/vendors/linux"},{"hub":true,"high":85,"name":"Adobe","rank":3,"slug":"adobe","critical":19,"exploited":0,"vulnerabilities":140,"url":"https://junglewise.ai/threats/vendors/adobe"},{"hub":true,"high":44,"name":"IBM","rank":4,"slug":"ibm","critical":9,"exploited":0,"vulnerabilities":85,"url":"https://junglewise.ai/threats/vendors/ibm"},{"hub":true,"high":39,"name":"Juniper Networks","rank":5,"slug":"juniper-networks","critical":6,"exploited":0,"vulnerabilities":48,"url":"https://junglewise.ai/threats/vendors/juniper-networks"},{"hub":true,"high":37,"name":"Progress","rank":6,"slug":"progress","critical":5,"exploited":0,"vulnerabilities":55,"url":"https://junglewise.ai/threats/vendors/progress"},{"hub":true,"high":34,"name":"Google","rank":7,"slug":"google","critical":7,"exploited":0,"vulnerabilities":51,"url":"https://junglewise.ai/threats/vendors/google"},{"hub":true,"high":17,"name":"Frappe","rank":8,"slug":"frappe","critical":0,"exploited":0,"vulnerabilities":93,"url":"https://junglewise.ai/threats/vendors/frappe"},{"hub":true,"high":11,"name":"Mozilla","rank":9,"slug":"mozilla","critical":4,"exploited":0,"vulnerabilities":83,"url":"https://junglewise.ai/threats/vendors/mozilla"},{"hub":true,"high":14,"name":"Siemens","rank":10,"slug":"siemens","critical":4,"exploited":0,"vulnerabilities":33,"url":"https://junglewise.ai/threats/vendors/siemens"}],"generated_at":"2026-10-20T00:07:00.179834+00:00","technologies":[{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"}],"high":457,"name":"Microsoft Windows","rank":1,"slug":"windows-","score":1642,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":20,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":618,"url":"https://junglewise.ai/threats/technologies/windows-"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":127,"name":"Microsoft Windows Server 2025","rank":2,"slug":"windows-server-2025","score":551,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":15,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":212,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":130,"name":"Microsoft Windows 11 26h2","rank":3,"slug":"windows-11-26h2","score":522,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":197,"url":"https://junglewise.ai/threats/technologies/windows-11-26h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":117,"name":"Microsoft Windows Server 2022","rank":4,"slug":"windows-server-2022","score":519,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":15,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":200,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":129,"name":"Microsoft Windows 11 24h2","rank":5,"slug":"windows-11-24h2","score":519,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":196,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":129,"name":"Microsoft Windows 11 25h2","rank":6,"slug":"windows-11-25h2","score":519,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":196,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":124,"name":"Microsoft Windows 11 26h1","rank":7,"slug":"windows-11-26h1","score":505,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":192,"url":"https://junglewise.ai/threats/technologies/windows-11-26h1"},{"hub":true,"top":[{"cve":"CVE-2026-96957","cvss":8.8,"epss":0.0046,"slug":"cve-2026-96957-improper-verification-of-cryptographic-signature-in-net-allows-an","title":".NET cryptographic signature verification bypass","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.267+00:00","url":"https://junglewise.ai/threats/cve-2026-96957-improper-verification-of-cryptographic-signature-in-net-allows-an"},{"cve":"CVE-2026-96960","cvss":7.5,"epss":0.0106,"slug":"cve-2026-96960-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.67+00:00","url":"https://junglewise.ai/threats/cve-2026-96960-microsoft-security-advisory-net-and-visual-studio-denial-of"},{"cve":"CVE-2026-96959","cvss":7.5,"epss":0.0077,"slug":"cve-2026-96959-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.527+00:00","url":"https://junglewise.ai/threats/cve-2026-96959-microsoft-security-advisory-net-and-visual-studio-denial-of"}],"high":4,"name":"Linux Kernel","rank":8,"slug":"kernel","score":489,"vendor":{"hub":true,"name":"Linux","slug":"linux"},"critical":0,"max_cvss":8.8,"max_epss":0.0106,"exploited":0,"vulnerabilities":481,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":117,"name":"Microsoft Windows 11 23h2","rank":9,"slug":"windows-11-23h2","score":480,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":11,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":181,"url":"https://junglewise.ai/threats/technologies/windows-11-23h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":106,"name":"Microsoft Windows Server 2019","rank":10,"slug":"windows-server-2019","score":470,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":13,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":183,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":105,"name":"Microsoft Windows 10 1809","rank":11,"slug":"windows-10-1809","score":453,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":12,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":173,"url":"https://junglewise.ai/threats/technologies/windows-10-1809"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":110,"name":"Microsoft Windows 10 21h2","rank":12,"slug":"windows-10-21h2","score":443,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":9,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":168,"url":"https://junglewise.ai/threats/technologies/windows-10-21h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"}],"high":109,"name":"Microsoft Windows 10 22h2","rank":13,"slug":"windows-10-22h2","score":440,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":9,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":167,"url":"https://junglewise.ai/threats/technologies/windows-10-22h2"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"}],"high":85,"name":"Microsoft Windows Server 2016","rank":14,"slug":"windows-server-2016","score":386,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":10,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"}],"high":85,"name":"Microsoft Windows 10 1607","rank":15,"slug":"windows-10-1607","score":379,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":10,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":149,"url":"https://junglewise.ai/threats/technologies/windows-10-1607"},{"hub":true,"top":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"}],"high":72,"name":"Microsoft Windows Server 2012","rank":16,"slug":"windows-server-2012","score":344,"vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"},"critical":10,"max_cvss":9.8,"max_epss":0.0214,"exploited":1,"vulnerabilities":140,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"hub":true,"top":[{"cve":"CVE-2026-110165","cvss":9.6,"epss":0.0031,"slug":"cve-2026-110165-use-after-free-in-core-in-google-chrome-on-on-android-prior-to","title":"Google Chrome use-after-free in Core on Android","severity":"critical","exploited":false,"published_at":"2026-10-13T22:17:36.48+00:00","url":"https://junglewise.ai/threats/cve-2026-110165-use-after-free-in-core-in-google-chrome-on-on-android-prior-to"},{"cve":"CVE-2026-110161","cvss":9.6,"epss":0.0034,"slug":"cve-2026-110161-use-after-free-in-network-in-google-chrome-prior-to-155-0-8059","title":"Google Chrome use after free in Network component","severity":"critical","exploited":false,"published_at":"2026-10-13T22:17:36.05+00:00","url":"https://junglewise.ai/threats/cve-2026-110161-use-after-free-in-network-in-google-chrome-prior-to-155-0-8059"},{"cve":"CVE-2026-110159","cvss":9.6,"epss":0.0025,"slug":"cve-2026-110159-incorrect-authorization-in-updater-in-google-chrome-prior-to-155","title":"Google Chrome incorrect authorization in Updater","severity":"critical","exploited":false,"published_at":"2026-10-13T22:17:35.833+00:00","url":"https://junglewise.ai/threats/cve-2026-110159-incorrect-authorization-in-updater-in-google-chrome-prior-to-155"}],"high":31,"name":"Google Chrome","rank":17,"slug":"chrome","score":144,"vendor":{"hub":true,"name":"Google","slug":"google"},"critical":7,"max_cvss":9.6,"max_epss":0.0041,"exploited":0,"vulnerabilities":47,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":true,"top":[{"cve":"CVE-2026-101982","cvss":9.8,"epss":0.0057,"slug":"cve-2026-101982-a-stack-based-buffer-overflow-vulnerability-in-the-routing","title":"Juniper Networks Junos OS stack buffer overflow in BGP/EVPN","severity":"critical","exploited":false,"published_at":"2026-10-14T18:17:13.12+00:00","url":"https://junglewise.ai/threats/cve-2026-101982-a-stack-based-buffer-overflow-vulnerability-in-the-routing"},{"cve":"CVE-2026-102178","cvss":9.8,"epss":0.0045,"slug":"cve-2026-102178-a-stack-based-buffer-overflow-vulnerability-in-the-bgp-routing","title":"Juniper Networks Junos OS stack buffer overflow in BGP routing daemon","severity":"critical","exploited":false,"published_at":"2026-10-14T17:18:05.61+00:00","url":"https://junglewise.ai/threats/cve-2026-102178-a-stack-based-buffer-overflow-vulnerability-in-the-bgp-routing"},{"cve":"CVE-2026-102175","cvss":9.8,"epss":0.0073,"slug":"cve-2026-102175-a-heap-based-buffer-overflow-vulnerability-in-the-sdxd-service","title":"Juniper Junos OS heap buffer overflow in sdxd daemon","severity":"critical","exploited":false,"published_at":"2026-10-14T17:18:05.147+00:00","url":"https://junglewise.ai/threats/cve-2026-102175-a-heap-based-buffer-overflow-vulnerability-in-the-sdxd-service"}],"high":36,"name":"Juniper Networks Junos OS","rank":18,"slug":"juniper-networks-junos-os","score":141,"vendor":{"hub":true,"name":"Juniper Networks","slug":"juniper-networks"},"critical":5,"max_cvss":9.8,"max_epss":0.0389,"exploited":0,"vulnerabilities":44,"url":"https://junglewise.ai/threats/technologies/juniper-networks-junos-os"},{"hub":true,"top":[{"cve":"CVE-2026-101982","cvss":9.8,"epss":0.0057,"slug":"cve-2026-101982-a-stack-based-buffer-overflow-vulnerability-in-the-routing","title":"Juniper Networks Junos OS stack buffer overflow in BGP/EVPN","severity":"critical","exploited":false,"published_at":"2026-10-14T18:17:13.12+00:00","url":"https://junglewise.ai/threats/cve-2026-101982-a-stack-based-buffer-overflow-vulnerability-in-the-routing"},{"cve":"CVE-2026-102178","cvss":9.8,"epss":0.0045,"slug":"cve-2026-102178-a-stack-based-buffer-overflow-vulnerability-in-the-bgp-routing","title":"Juniper Networks Junos OS stack buffer overflow in BGP routing daemon","severity":"critical","exploited":false,"published_at":"2026-10-14T17:18:05.61+00:00","url":"https://junglewise.ai/threats/cve-2026-102178-a-stack-based-buffer-overflow-vulnerability-in-the-bgp-routing"},{"cve":"CVE-2026-102175","cvss":9.8,"epss":0.0073,"slug":"cve-2026-102175-a-heap-based-buffer-overflow-vulnerability-in-the-sdxd-service","title":"Juniper Junos OS heap buffer overflow in sdxd daemon","severity":"critical","exploited":false,"published_at":"2026-10-14T17:18:05.147+00:00","url":"https://junglewise.ai/threats/cve-2026-102175-a-heap-based-buffer-overflow-vulnerability-in-the-sdxd-service"}],"high":33,"name":"Juniper Networks Junos OS Evolved","rank":19,"slug":"junos-os-evolved","score":132,"vendor":{"hub":true,"name":"Juniper Networks","slug":"juniper-networks"},"critical":5,"max_cvss":9.8,"max_epss":0.0392,"exploited":0,"vulnerabilities":41,"url":"https://junglewise.ai/threats/technologies/junos-os-evolved"},{"hub":true,"top":[{"cve":"CVE-2026-109755","cvss":9.6,"epss":0.0034,"slug":"cve-2026-109755-sandbox-escape-in-the-dom-content-processes-component-this","title":"Mozilla Firefox sandbox escape in DOM Content Processes","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:26.417+00:00","url":"https://junglewise.ai/threats/cve-2026-109755-sandbox-escape-in-the-dom-content-processes-component-this"},{"cve":"CVE-2026-109708","cvss":9.6,"epss":0.0032,"slug":"cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the","title":"Firefox sandbox escape due to incorrect boundary conditions in Networking","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.91+00:00","url":"https://junglewise.ai/threats/cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the"},{"cve":"CVE-2026-109707","cvss":9.6,"epss":0.0031,"slug":"cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component","title":"Firefox sandbox escape in Networking component use-after-free","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.803+00:00","url":"https://junglewise.ai/threats/cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component"}],"high":10,"name":"Mozilla Thunderbird","rank":20,"slug":"thunderbird","score":120,"vendor":{"hub":true,"name":"Mozilla","slug":"mozilla"},"critical":4,"max_cvss":9.6,"max_epss":0.0037,"exploited":0,"vulnerabilities":80,"url":"https://junglewise.ai/threats/technologies/thunderbird"},{"hub":true,"top":[{"cve":"CVE-2026-109755","cvss":9.6,"epss":0.0034,"slug":"cve-2026-109755-sandbox-escape-in-the-dom-content-processes-component-this","title":"Mozilla Firefox sandbox escape in DOM Content Processes","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:26.417+00:00","url":"https://junglewise.ai/threats/cve-2026-109755-sandbox-escape-in-the-dom-content-processes-component-this"},{"cve":"CVE-2026-109708","cvss":9.6,"epss":0.0032,"slug":"cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the","title":"Firefox sandbox escape due to incorrect boundary conditions in Networking","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.91+00:00","url":"https://junglewise.ai/threats/cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the"},{"cve":"CVE-2026-109707","cvss":9.6,"epss":0.0031,"slug":"cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component","title":"Firefox sandbox escape in Networking component use-after-free","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.803+00:00","url":"https://junglewise.ai/threats/cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component"}],"high":10,"name":"Mozilla Firefox","rank":21,"slug":"firefox","score":117,"vendor":{"hub":true,"name":"Mozilla","slug":"mozilla"},"critical":4,"max_cvss":9.6,"max_epss":0.0037,"exploited":0,"vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/firefox"},{"hub":true,"top":[{"cve":"CVE-2026-85955","cvss":9.9,"epss":0.0045,"slug":"cve-2026-85955-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x","title":"Progress MarkLogic Server privilege escalation in XQuery evaluation","severity":"critical","exploited":false,"published_at":"2026-10-12T16:17:07.07+00:00","url":"https://junglewise.ai/threats/cve-2026-85955-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x"},{"cve":"CVE-2026-85948","cvss":9.9,"epss":0.0035,"slug":"cve-2026-85948-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x","title":"Progress MarkLogic Server XQuery injection in Management API","severity":"critical","exploited":false,"published_at":"2026-10-12T16:17:06.173+00:00","url":"https://junglewise.ai/threats/cve-2026-85948-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x"},{"cve":"CVE-2026-85947","cvss":9.9,"epss":0.0035,"slug":"cve-2026-85947-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x","title":"Progress MarkLogic Server authorization flaw in forest management","severity":"critical","exploited":false,"published_at":"2026-10-12T16:17:06.04+00:00","url":"https://junglewise.ai/threats/cve-2026-85947-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x"}],"high":24,"name":"Progress Marklogic Server","rank":22,"slug":"marklogic-server","score":104,"vendor":{"hub":true,"name":"Progress","slug":"progress"},"critical":5,"max_cvss":9.9,"max_epss":0.0045,"exploited":0,"vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/marklogic-server"},{"hub":true,"top":[{"cve":"CVE-2026-109667","cvss":8.8,"epss":0.0025,"slug":"cve-2026-109667-frappe-erpnext-before-15-111-0-and-16-x-before-16-22-0-contains","title":"Frappe ERPNext privilege escalation in record-creation endpoint","severity":"high","exploited":false,"published_at":"2026-10-12T23:17:34.21+00:00","url":"https://junglewise.ai/threats/cve-2026-109667-frappe-erpnext-before-15-111-0-and-16-x-before-16-22-0-contains"},{"cve":"CVE-2026-109652","cvss":8.8,"epss":0.0031,"slug":"cve-2026-109652-frappe-erpnext-before-15-119-1-and-16-x-before-16-32-0-contains","title":"Frappe ERPNext server-side template injection via message fields","severity":"high","exploited":false,"published_at":"2026-10-12T23:17:31.723+00:00","url":"https://junglewise.ai/threats/cve-2026-109652-frappe-erpnext-before-15-119-1-and-16-x-before-16-32-0-contains"},{"cve":"CVE-2026-109608","cvss":8.8,"epss":0.0025,"slug":"cve-2026-109608-frappe-erpnext-before-15-121-0-and-16-x-before-16-34-0-contains","title":"Frappe ERPNext SQL injection in multiple endpoints","severity":"high","exploited":false,"published_at":"2026-10-12T23:17:24.497+00:00","url":"https://junglewise.ai/threats/cve-2026-109608-frappe-erpnext-before-15-121-0-and-16-x-before-16-34-0-contains"}],"high":15,"name":"Frappe ERPNext","rank":23,"slug":"erpnext","score":100,"vendor":{"hub":true,"name":"Frappe","slug":"frappe"},"critical":0,"max_cvss":8.8,"max_epss":0.0034,"exploited":0,"vulnerabilities":70,"url":"https://junglewise.ai/threats/technologies/erpnext"},{"hub":true,"top":[{"cve":"CVE-2026-106624","cvss":10,"epss":0.0105,"slug":"cve-2026-106624-coldfusion-is-affected-by-an-improper-control-of-generation-of","title":"Adobe ColdFusion improper input validation code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T21:17:31.703+00:00","url":"https://junglewise.ai/threats/cve-2026-106624-coldfusion-is-affected-by-an-improper-control-of-generation-of"},{"cve":"CVE-2026-106622","cvss":10,"epss":0.007,"slug":"cve-2026-106622-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf","title":"Adobe ColdFusion server-side request forgery privilege escalation","severity":"critical","exploited":false,"published_at":"2026-10-13T21:17:31.49+00:00","url":"https://junglewise.ai/threats/cve-2026-106622-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf"},{"cve":"CVE-2026-106612","cvss":9.9,"epss":0.0044,"slug":"cve-2026-106612-coldfusion-is-affected-by-an-incorrect-authorization","title":"Adobe ColdFusion incorrect authorization vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-13T21:17:30.347+00:00","url":"https://junglewise.ai/threats/cve-2026-106612-coldfusion-is-affected-by-an-incorrect-authorization"}],"high":17,"name":"Adobe ColdFusion","rank":24,"slug":"coldfusion","score":99,"vendor":{"hub":true,"name":"Adobe","slug":"adobe"},"critical":8,"max_cvss":10,"max_epss":0.0105,"exploited":0,"vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/coldfusion"},{"hub":true,"top":[{"cve":"CVE-2026-109708","cvss":9.6,"epss":0.0032,"slug":"cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the","title":"Firefox sandbox escape due to incorrect boundary conditions in Networking","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.91+00:00","url":"https://junglewise.ai/threats/cve-2026-109708-sandbox-escape-due-to-incorrect-boundary-conditions-in-the"},{"cve":"CVE-2026-109707","cvss":9.6,"epss":0.0031,"slug":"cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component","title":"Firefox sandbox escape in Networking component use-after-free","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.803+00:00","url":"https://junglewise.ai/threats/cve-2026-109707-sandbox-escape-due-to-use-after-free-in-the-networking-component"},{"cve":"CVE-2026-109705","cvss":9.6,"epss":0.0031,"slug":"cve-2026-109705-sandbox-escape-site-isolation-issue-due-to-incorrect-boundary","title":"Mozilla Firefox sandbox escape in Networking with use-after-free","severity":"critical","exploited":false,"published_at":"2026-10-13T13:17:20.587+00:00","url":"https://junglewise.ai/threats/cve-2026-109705-sandbox-escape-site-isolation-issue-due-to-incorrect-boundary"}],"high":9,"name":"Mozilla Firefox ESR","rank":25,"slug":"firefox-esr","score":94,"vendor":{"hub":true,"name":"Mozilla","slug":"mozilla"},"critical":3,"max_cvss":9.6,"max_epss":0.0037,"exploited":0,"vulnerabilities":61,"url":"https://junglewise.ai/threats/technologies/firefox-esr"}],"previous":{"key":"2026-10-05","top":"Google Chrome","period":{"end":"2026-10-11","start":"2026-10-05"},"totals":{"high":424,"tracked":6710,"critical":93,"exploited":3,"technologies":959,"vulnerabilities":1789},"url":"https://junglewise.ai/threats/weekly/2026-10-05"},"next":{"key":"2026-10-19","top":"Google Chrome","period":{"end":"2026-10-25","start":"2026-10-19"},"totals":{"high":1012,"tracked":7496,"critical":267,"exploited":3,"technologies":1727,"vulnerabilities":4321},"url":"https://junglewise.ai/threats/weekly/2026-10-19"}}