Weekly report
Most vulnerable technologies: week of 19 to 25 October 2026 (week 43)
Final report, published . It does not change.
In the week of 19 to 25 October 2026, Junglewise Threat Intelligence recorded 4,321 new vulnerabilities: 267 critical, 1,012 high and 3 exploited in the wild. The most vulnerable technology was Google Chrome, with 353 vulnerabilities (0 critical), followed by Linux Kernel (216) and TOTOLINK X2000r (30).
- New vulnerabilities
- 4,321
- Critical
- 267
- Exploited in the wild
- 3
- Technologies affected
- 1,727
Ranking
Most affected vendors
- 1.Oracle987 vulnerabilities, 66 critical, 0 exploited
- 2.Google363 vulnerabilities, 1 critical, 1 exploited
- 3.Apache155 vulnerabilities, 7 critical, 0 exploited
- 4.Linux207 vulnerabilities, 0 critical, 0 exploited
- 5.TOTOLINK33 vulnerabilities, 33 critical, 0 exploited
- 6.Packagist:Https://Packages.drupal.org/8103 vulnerabilities, 0 critical, 0 exploited
- 7.Drupal96 vulnerabilities, 0 critical, 0 exploited
- 8.Cisco34 vulnerabilities, 5 critical, 0 exploited
- 9.IBM43 vulnerabilities, 2 critical, 0 exploited
- 10.Python Pillow26 vulnerabilities, 2 critical, 0 exploited
Most severe vulnerabilities
- CVE-2026-114625: Arista VeloCloud Orchestrator privilege escalationcriticalexploited in the wildCVSS 9.9EPSS 0.6%
- CVE-2026-109619: PHP use-after-free in global state handlingcriticalexploited in the wildEPSS 100.0%
- CVE-2026-109618: PHP Memory Corruption Vulnerabilitycriticalexploited in the wildEPSS 100.0%
- CVE-2026-111057: Mercury Python framework regex bypass in terminal API accesscriticalCVSS 10EPSS 0.4%
- CVE-2026-97785: Microsoft Azure AD App Proxy authentication bypasscriticalCVSS 10
- CVE-2026-83938: Azure Kubernetes Configuration Service missing authentication for privilege escalationcriticalCVSS 10
- CVE-2026-110063: Microsoft VM Inspector for Azure Virtual Machines symlink following privilege escalationcriticalCVSS 10
- CVE-2026-79851: vulnerabilitycriticalCVSS 10
- CVE-2026-79850: <UNKNOWN>criticalCVSS 10
- CVE-2026-79849: <UNKNOWN>criticalCVSS 10
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
Technologies are ranked by a score: 10 points for each vulnerability exploited in the wild, 5 for each critical, 2 for each high and 1 for every vulnerability. A vulnerability counts once for every technology it affects, so one advisory can appear under several products.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/weekly/2026-10-19.json, and this page as text at https://junglewise.ai/threats/weekly/2026-10-19.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies: week of 19 to 25 October 2026 (week 43)", https://junglewise.ai/threats/weekly/2026-10-19, 27 October 2026.