{"schema_version":1,"title":"Most vulnerable technologies: week of 19 to 25 October 2026 (week 43)","summary":"In the week of 19 to 25 October 2026, Junglewise Threat Intelligence recorded 4,321 new vulnerabilities: 267 critical, 1,012 high and 3 exploited in the wild. The most vulnerable technology was Google Chrome, with 353 vulnerabilities (0 critical), followed by Linux Kernel (216) and TOTOLINK X2000r (30).","url":"https://junglewise.ai/threats/weekly/2026-10-19","json_url":"https://junglewise.ai/threats/weekly/2026-10-19.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/weekly/2026-10-19","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"Technologies are ranked by 10 points per vulnerability exploited in the wild, 5 per critical, 2 per high and 1 per vulnerability, over vulnerabilities published in the period (UTC). A vulnerability counts for every technology it affects.","kind":"week","period":{"end":"2026-10-25","start":"2026-10-19"},"totals":{"high":1012,"tracked":7496,"critical":267,"exploited":3,"technologies":1727,"vulnerabilities":4321},"notable":[{"cve":"CVE-2026-114625","cvss":9.9,"epss":0.0056,"slug":"cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where","title":"Arista VeloCloud Orchestrator privilege escalation","severity":"critical","exploited":true,"published_at":"2026-10-22T21:17:16.87+00:00","url":"https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where"},{"cve":"CVE-2026-109619","epss":1,"slug":"cve-2026-109619-php-has-various-global-state-that-temporarily-points-into","title":"PHP use-after-free in global state handling","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.823+00:00","url":"https://junglewise.ai/threats/cve-2026-109619-php-has-various-global-state-that-temporarily-points-into"},{"cve":"CVE-2026-109618","epss":0.9998,"slug":"cve-2026-109618-gcp-2026-070","title":"PHP Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.357+00:00","url":"https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070"},{"cve":"CVE-2026-111057","cvss":10,"epss":0.0044,"slug":"cve-2026-111057-mercury-is-a-python-framework-for-sharing-jupyter-notebooks-as","title":"Mercury Python framework regex bypass in terminal API access","severity":"critical","exploited":false,"published_at":"2026-10-19T16:17:03.81+00:00","url":"https://junglewise.ai/threats/cve-2026-111057-mercury-is-a-python-framework-for-sharing-jupyter-notebooks-as"},{"cve":"CVE-2026-97785","cvss":10,"slug":"cve-2026-97785-improper-authentication-in-aad-app-proxy-allows-an-unauthorized","title":"Microsoft Azure AD App Proxy authentication bypass","severity":"critical","exploited":false,"published_at":"2026-10-22T22:20:13.483+00:00","url":"https://junglewise.ai/threats/cve-2026-97785-improper-authentication-in-aad-app-proxy-allows-an-unauthorized"},{"cve":"CVE-2026-83938","cvss":10,"slug":"cve-2026-83938-missing-authentication-for-critical-function-in-azure-kubernetes","title":"Azure Kubernetes Configuration Service missing authentication for privilege escalation","severity":"critical","exploited":false,"published_at":"2026-10-22T22:19:18.54+00:00","url":"https://junglewise.ai/threats/cve-2026-83938-missing-authentication-for-critical-function-in-azure-kubernetes"},{"cve":"CVE-2026-110063","cvss":10,"slug":"cve-2026-110063-improper-link-resolution-before-file-access-link-following-in-vm","title":"Microsoft VM Inspector for Azure Virtual Machines symlink following privilege escalation","severity":"critical","exploited":false,"published_at":"2026-10-22T22:18:00.75+00:00","url":"https://junglewise.ai/threats/cve-2026-110063-improper-link-resolution-before-file-access-link-following-in-vm"},{"cve":"CVE-2026-79851","cvss":10,"slug":"cve-2026-79851-no-description-provided","title":"vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-22T19:17:57.29+00:00","url":"https://junglewise.ai/threats/cve-2026-79851-no-description-provided"},{"cve":"CVE-2026-79850","cvss":10,"slug":"cve-2026-79850-no-description-provided","title":"<UNKNOWN>","severity":"critical","exploited":false,"published_at":"2026-10-22T19:17:57.183+00:00","url":"https://junglewise.ai/threats/cve-2026-79850-no-description-provided"},{"cve":"CVE-2026-79849","cvss":10,"slug":"cve-2026-79849-no-description-provided","title":"<UNKNOWN>","severity":"critical","exploited":false,"published_at":"2026-10-22T19:17:57.07+00:00","url":"https://junglewise.ai/threats/cve-2026-79849-no-description-provided"}],"vendors":[{"hub":true,"high":383,"name":"Oracle","rank":1,"slug":"oracle","critical":66,"exploited":0,"vulnerabilities":987,"url":"https://junglewise.ai/threats/vendors/oracle"},{"hub":true,"high":1,"name":"Google","rank":2,"slug":"google","critical":1,"exploited":1,"vulnerabilities":363,"url":"https://junglewise.ai/threats/vendors/google"},{"hub":true,"high":21,"name":"Apache","rank":3,"slug":"apache","critical":7,"exploited":0,"vulnerabilities":155,"url":"https://junglewise.ai/threats/vendors/apache"},{"hub":true,"high":1,"name":"Linux","rank":4,"slug":"linux","critical":0,"exploited":0,"vulnerabilities":207,"url":"https://junglewise.ai/threats/vendors/linux"},{"hub":true,"high":0,"name":"TOTOLINK","rank":5,"slug":"totolink","critical":33,"exploited":0,"vulnerabilities":33,"url":"https://junglewise.ai/threats/vendors/totolink"},{"hub":true,"high":0,"name":"Packagist:Https://Packages.drupal.org/8","rank":6,"slug":"packagist-https-packages-drupal-org-8","critical":0,"exploited":0,"vulnerabilities":103,"url":"https://junglewise.ai/threats/vendors/packagist-https-packages-drupal-org-8"},{"hub":true,"high":0,"name":"Drupal","rank":7,"slug":"drupal","critical":0,"exploited":0,"vulnerabilities":96,"url":"https://junglewise.ai/threats/vendors/drupal"},{"hub":true,"high":17,"name":"Cisco","rank":8,"slug":"cisco","critical":5,"exploited":0,"vulnerabilities":34,"url":"https://junglewise.ai/threats/vendors/cisco"},{"hub":true,"high":16,"name":"IBM","rank":9,"slug":"ibm","critical":2,"exploited":0,"vulnerabilities":43,"url":"https://junglewise.ai/threats/vendors/ibm"},{"hub":true,"high":14,"name":"Python Pillow","rank":10,"slug":"python-pillow","critical":2,"exploited":0,"vulnerabilities":26,"url":"https://junglewise.ai/threats/vendors/python-pillow"}],"generated_at":"2026-10-27T00:07:00.150062+00:00","technologies":[{"hub":true,"top":[{"cve":"CVE-2026-113344","slug":"cve-2026-113344-use-after-free-in-performance-in-google-chrome-prior-to-156-0","title":"Google Chrome use after free in Performance","severity":"info","exploited":false,"published_at":"2026-10-20T22:19:29.11+00:00","url":"https://junglewise.ai/threats/cve-2026-113344-use-after-free-in-performance-in-google-chrome-prior-to-156-0"},{"cve":"CVE-2026-113343","slug":"cve-2026-113343-memory-corruption-in-sandbox-in-google-chrome-prior-to-156-0","title":"Google Chrome memory corruption in Sandbox code execution","severity":"info","exploited":false,"published_at":"2026-10-20T22:19:29+00:00","url":"https://junglewise.ai/threats/cve-2026-113343-memory-corruption-in-sandbox-in-google-chrome-prior-to-156-0"},{"cve":"CVE-2026-113342","slug":"cve-2026-113342-memory-corruption-in-network-in-google-chrome-prior-to-156-0","title":"Google Chrome memory corruption in Network component","severity":"info","exploited":false,"published_at":"2026-10-20T22:19:28.877+00:00","url":"https://junglewise.ai/threats/cve-2026-113342-memory-corruption-in-network-in-google-chrome-prior-to-156-0"}],"high":0,"name":"Google Chrome","rank":1,"slug":"chrome","score":353,"vendor":{"hub":true,"name":"Google","slug":"google"},"critical":0,"max_cvss":null,"max_epss":null,"exploited":0,"vulnerabilities":353,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":true,"top":[{"cve":"CVE-2026-79976","cvss":7.1,"slug":"cve-2026-79976-the-mctp-over-i2c-gpio-target-binding-in-subsys-pmci-mctp-mctp","title":"Linux kernel MCTP-over-I2C+GPIO null pointer dereference","severity":"high","exploited":false,"published_at":"2026-10-21T19:17:04.06+00:00","url":"https://junglewise.ai/threats/cve-2026-79976-the-mctp-over-i2c-gpio-target-binding-in-subsys-pmci-mctp-mctp"},{"cve":"CVE-2026-99087","slug":"cve-2026-99087-in-the-linux-kernel-the-following-vulnerability-has-been-resolved","title":"Linux kernel dm-integrity NULL pointer dereference with 'R' flag","severity":"info","exploited":false,"published_at":"2026-10-23T13:17:33.24+00:00","url":"https://junglewise.ai/threats/cve-2026-99087-in-the-linux-kernel-the-following-vulnerability-has-been-resolved"},{"cve":"CVE-2026-99086","slug":"cve-2026-99086-in-the-linux-kernel-the-following-vulnerability-has-been-resolved","title":"Linux kernel dm-integrity superblock validation bypass","severity":"info","exploited":false,"published_at":"2026-10-23T13:17:33.113+00:00","url":"https://junglewise.ai/threats/cve-2026-99086-in-the-linux-kernel-the-following-vulnerability-has-been-resolved"}],"high":1,"name":"Linux Kernel","rank":2,"slug":"kernel","score":218,"vendor":{"hub":true,"name":"Linux","slug":"linux"},"critical":0,"max_cvss":7.1,"max_epss":null,"exploited":0,"vulnerabilities":216,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"top":[{"cve":"CVE-2026-9869","cvss":9.1,"slug":"cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"TOTOLINK X2000R stack-based buffer overflow in formTR069Config","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:23.143+00:00","url":"https://junglewise.ai/threats/cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9827","cvss":9.1,"slug":"cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa","title":"Totolink X2000R arbitrary file write in boa formUploadFile","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:23.02+00:00","url":"https://junglewise.ai/threats/cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9817","cvss":9.1,"slug":"cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"Totolink X2000R stack-based buffer overflow in boa formUploadFile","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.9+00:00","url":"https://junglewise.ai/threats/cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"}],"high":0,"name":"TOTOLINK X2000r","rank":3,"slug":"x2000r","score":180,"vendor":{"hub":true,"name":"TOTOLINK","slug":"totolink"},"critical":30,"max_cvss":9.1,"max_epss":null,"exploited":0,"vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/x2000r"},{"hub":true,"top":[{"cve":"CVE-2026-91305","cvss":9.1,"slug":"cve-2026-91305-vulnerability-in-the-jd-edwards-enterpriseone-tools-product-of","title":"Oracle JD Edwards EnterpriseOne Tools unauthenticated data access in Installation Security","severity":"critical","exploited":false,"published_at":"2026-10-20T22:20:32.243+00:00","url":"https://junglewise.ai/threats/cve-2026-91305-vulnerability-in-the-jd-edwards-enterpriseone-tools-product-of"},{"cve":"CVE-2026-91265","cvss":9.1,"slug":"cve-2026-91265-vulnerability-in-the-jd-edwards-enterpriseone-tools-product-of","title":"Oracle JD Edwards EnterpriseOne Tools unauthenticated data access via HTTP","severity":"critical","exploited":false,"published_at":"2026-10-20T22:20:27.557+00:00","url":"https://junglewise.ai/threats/cve-2026-91265-vulnerability-in-the-jd-edwards-enterpriseone-tools-product-of"},{"cve":"CVE-2026-91326","cvss":8.8,"slug":"cve-2026-91326-vulnerability-in-the-jd-edwards-enterpriseone-tools-product-of","title":"Oracle JD Edwards EnterpriseOne Tools installation security takeover","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:34.687+00:00","url":"https://junglewise.ai/threats/cve-2026-91326-vulnerability-in-the-jd-edwards-enterpriseone-tools-product-of"}],"high":38,"name":"Oracle JD Edwards EnterpriseOne Tools","rank":4,"slug":"jd-edwards-enterpriseone-tools","score":162,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":2,"max_cvss":9.1,"max_epss":null,"exploited":0,"vulnerabilities":76,"url":"https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools"},{"hub":true,"top":[{"cve":"CVE-2026-91231","cvss":10,"slug":"cve-2026-91231-vulnerability-in-the-oracle-soa-suite-product-of-oracle-fusion","title":"Oracle SOA Suite remote code execution in Adapters component","severity":"critical","exploited":false,"published_at":"2026-10-20T22:20:23.787+00:00","url":"https://junglewise.ai/threats/cve-2026-91231-vulnerability-in-the-oracle-soa-suite-product-of-oracle-fusion"},{"cve":"CVE-2026-91221","cvss":10,"slug":"cve-2026-91221-vulnerability-in-the-oracle-soa-suite-product-of-oracle-fusion","title":"Oracle SOA Suite remote code execution in Fabric Layer","severity":"critical","exploited":false,"published_at":"2026-10-20T22:20:22.58+00:00","url":"https://junglewise.ai/threats/cve-2026-91221-vulnerability-in-the-oracle-soa-suite-product-of-oracle-fusion"},{"cve":"CVE-2026-91216","cvss":10,"slug":"cve-2026-91216-vulnerability-in-the-oracle-soa-suite-product-of-oracle-fusion","title":"Oracle SOA Suite remote code execution in Fabric Layer","severity":"critical","exploited":false,"published_at":"2026-10-20T22:20:22.013+00:00","url":"https://junglewise.ai/threats/cve-2026-91216-vulnerability-in-the-oracle-soa-suite-product-of-oracle-fusion"}],"high":11,"name":"Oracle SOA Suite","rank":5,"slug":"soa-suite","score":124,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":15,"max_cvss":10,"max_epss":null,"exploited":0,"vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/soa-suite"},{"hub":true,"top":[{"cve":"CVE-2026-96639","cvss":9.8,"epss":0.0057,"slug":"cve-2026-96639-pillow-is-a-python-imaging-library-from-11-0-0-until-13-0-0-multi","title":"Pillow out-of-bounds write in multi-frame image loaders","severity":"critical","exploited":false,"published_at":"2026-10-21T21:20:32.217+00:00","url":"https://junglewise.ai/threats/cve-2026-96639-pillow-is-a-python-imaging-library-from-11-0-0-until-13-0-0-multi"},{"cve":"CVE-2026-112900","cvss":4,"epss":0.0043,"slug":"cve-2026-112900-pillow-is-a-python-imaging-library-from-2-6-0-until-13-0-0","title":"Pillow argument injection in Ghostscript EPS processing","severity":"critical","exploited":false,"published_at":"2026-10-19T22:17:10.16+00:00","url":"https://junglewise.ai/threats/cve-2026-112900-pillow-is-a-python-imaging-library-from-2-6-0-until-13-0-0"},{"cve":"CVE-2026-112403","cvss":4,"epss":0.0032,"slug":"cve-2026-112403-pillow-is-a-python-imaging-library-prior-to-13-0-0-pillow-s-jpeg","title":"Pillow JPEG decoder buffer overflow in draft scaling","severity":"critical","exploited":false,"published_at":"2026-10-19T22:17:07.77+00:00","url":"https://junglewise.ai/threats/cve-2026-112403-pillow-is-a-python-imaging-library-prior-to-13-0-0-pillow-s-jpeg"}],"high":23,"name":"pillow (PyPI)","rank":6,"slug":"pillow","score":112,"vendor":{"hub":true,"name":"PyPI","slug":"pypi"},"critical":5,"max_cvss":9.8,"max_epss":0.0057,"exploited":0,"vulnerabilities":41,"url":"https://junglewise.ai/threats/technologies/pillow"},{"hub":true,"top":[{"cve":"CVE-2026-101781","cvss":8.8,"slug":"cve-2026-101781-vulnerability-in-the-mysql-server-mysql-cluster-product-of","title":"Oracle MySQL Server and MySQL Cluster unauthenticated network compromise in Group Replication GCS","severity":"high","exploited":false,"published_at":"2026-10-20T22:18:33.71+00:00","url":"https://junglewise.ai/threats/cve-2026-101781-vulnerability-in-the-mysql-server-mysql-cluster-product-of"},{"cve":"CVE-2026-101785","cvss":8.3,"slug":"cve-2026-101785-vulnerability-in-the-mysql-server-mysql-cluster-product-of","title":"Oracle MySQL Server JSON component privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-20T22:18:34.16+00:00","url":"https://junglewise.ai/threats/cve-2026-101785-vulnerability-in-the-mysql-server-mysql-cluster-product-of"},{"cve":"CVE-2026-101772","cvss":8.1,"slug":"cve-2026-101772-vulnerability-in-the-mysql-server-mysql-cluster-product-of","title":"Oracle MySQL Server and Cluster remote code execution in client programs","severity":"high","exploited":false,"published_at":"2026-10-20T22:18:32.64+00:00","url":"https://junglewise.ai/threats/cve-2026-101772-vulnerability-in-the-mysql-server-mysql-cluster-product-of"}],"high":12,"name":"Oracle MySQL Cluster","rank":7,"slug":"mysql-cluster","score":103,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":0,"max_cvss":8.8,"max_epss":null,"exploited":0,"vulnerabilities":79,"url":"https://junglewise.ai/threats/technologies/mysql-cluster"},{"hub":true,"top":[{"cve":"CVE-2026-101781","cvss":8.8,"slug":"cve-2026-101781-vulnerability-in-the-mysql-server-mysql-cluster-product-of","title":"Oracle MySQL Server and MySQL Cluster unauthenticated network compromise in Group Replication GCS","severity":"high","exploited":false,"published_at":"2026-10-20T22:18:33.71+00:00","url":"https://junglewise.ai/threats/cve-2026-101781-vulnerability-in-the-mysql-server-mysql-cluster-product-of"},{"cve":"CVE-2026-101785","cvss":8.3,"slug":"cve-2026-101785-vulnerability-in-the-mysql-server-mysql-cluster-product-of","title":"Oracle MySQL Server JSON component privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-20T22:18:34.16+00:00","url":"https://junglewise.ai/threats/cve-2026-101785-vulnerability-in-the-mysql-server-mysql-cluster-product-of"},{"cve":"CVE-2026-101772","cvss":8.1,"slug":"cve-2026-101772-vulnerability-in-the-mysql-server-mysql-cluster-product-of","title":"Oracle MySQL Server and Cluster remote code execution in client programs","severity":"high","exploited":false,"published_at":"2026-10-20T22:18:32.64+00:00","url":"https://junglewise.ai/threats/cve-2026-101772-vulnerability-in-the-mysql-server-mysql-cluster-product-of"}],"high":11,"name":"Oracle MySQL Server","rank":8,"slug":"mysql-server","score":99,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":0,"max_cvss":8.8,"max_epss":null,"exploited":0,"vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/mysql-server"},{"hub":true,"top":[{"cve":"CVE-2026-91663","cvss":9.9,"slug":"cve-2026-91663-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation in Security component","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:06.723+00:00","url":"https://junglewise.ai/threats/cve-2026-91663-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91658","cvss":9.9,"slug":"cve-2026-91658-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation via HTTP","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:06.15+00:00","url":"https://junglewise.ai/threats/cve-2026-91658-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91638","cvss":9.9,"slug":"cve-2026-91638-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase security vulnerability in authentication component","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:03.817+00:00","url":"https://junglewise.ai/threats/cve-2026-91638-vulnerability-in-oracle-essbase-component-security-the-supported"}],"high":11,"name":"Oracle Essbase","rank":9,"slug":"essbase","score":97,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":8,"max_cvss":9.9,"max_epss":null,"exploited":0,"vulnerabilities":35,"url":"https://junglewise.ai/threats/technologies/essbase"},{"hub":true,"top":[{"cve":"CVE-2026-101431","cvss":8.7,"slug":"cve-2026-101431-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft Enterprise PeopleTools CSRF or XSS in Test Framework","severity":"high","exploited":false,"published_at":"2026-10-20T22:17:51.473+00:00","url":"https://junglewise.ai/threats/cve-2026-101431-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"},{"cve":"CVE-2026-101422","cvss":8.1,"slug":"cve-2026-101422-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft Enterprise PeopleTools Report Distribution data integrity and denial of service","severity":"high","exploited":false,"published_at":"2026-10-20T22:17:50.43+00:00","url":"https://junglewise.ai/threats/cve-2026-101422-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"},{"cve":"CVE-2026-101411","cvss":8.1,"slug":"cve-2026-101411-vulnerability-in-the-peoplesoft-enterprise-peopletools-product","title":"Oracle PeopleSoft Enterprise PeopleTools remote code execution in Business Interlink","severity":"high","exploited":false,"published_at":"2026-10-20T22:17:49.167+00:00","url":"https://junglewise.ai/threats/cve-2026-101411-vulnerability-in-the-peoplesoft-enterprise-peopletools-product"}],"high":12,"name":"Oracle PeopleSoft Enterprise PeopleTools","rank":10,"slug":"peopletools","score":81,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":0,"max_cvss":8.7,"max_epss":null,"exploited":0,"vulnerabilities":57,"url":"https://junglewise.ai/threats/technologies/peopletools"},{"hub":true,"top":[{"cve":"CVE-2026-91354","cvss":9.9,"slug":"cve-2026-91354-vulnerability-in-the-oracle-outside-in-technology-product-of","title":"Oracle Outside In Technology remote privilege escalation","severity":"critical","exploited":false,"published_at":"2026-10-20T22:20:38.027+00:00","url":"https://junglewise.ai/threats/cve-2026-91354-vulnerability-in-the-oracle-outside-in-technology-product-of"},{"cve":"CVE-2026-91341","cvss":9.1,"slug":"cve-2026-91341-vulnerability-in-the-oracle-outside-in-technology-product-of","title":"Oracle Outside In Technology data corruption and denial of service","severity":"critical","exploited":false,"published_at":"2026-10-20T22:20:36.473+00:00","url":"https://junglewise.ai/threats/cve-2026-91341-vulnerability-in-the-oracle-outside-in-technology-product-of"},{"cve":"CVE-2026-91340","cvss":8.8,"slug":"cve-2026-91340-vulnerability-in-the-oracle-outside-in-technology-product-of","title":"Oracle Outside In Technology privilege escalation in Clean Content SDK","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:36.36+00:00","url":"https://junglewise.ai/threats/cve-2026-91340-vulnerability-in-the-oracle-outside-in-technology-product-of"}],"high":21,"name":"Oracle Outside In Technology","rank":11,"slug":"outside-in-technology","score":78,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":2,"max_cvss":9.9,"max_epss":null,"exploited":0,"vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/outside-in-technology"},{"hub":true,"top":[{"cve":"CVE-2026-88900","cvss":8.8,"slug":"cve-2026-88900-deserialization-of-untrusted-data-vulnerability-in-apache-camel","title":"Apache Camel deserialization of untrusted data in JGroups component","severity":"high","exploited":false,"published_at":"2026-10-19T12:17:11.98+00:00","url":"https://junglewise.ai/threats/cve-2026-88900-deserialization-of-untrusted-data-vulnerability-in-apache-camel"},{"cve":"CVE-2026-83531","cvss":8.8,"slug":"cve-2026-83531-improper-control-of-generation-of-code-code-injection-improper","title":"Apache Camel code injection in dynamic-router-control endpoint","severity":"high","exploited":false,"published_at":"2026-10-19T11:17:21.507+00:00","url":"https://junglewise.ai/threats/cve-2026-83531-improper-control-of-generation-of-code-code-injection-improper"},{"cve":"CVE-2026-78165","cvss":8.8,"slug":"cve-2026-78165-deserialization-of-untrusted-data-vulnerability-in-apache-camel","title":"Apache Camel Spring Redis deserialization of untrusted data","severity":"high","exploited":false,"published_at":"2026-10-19T11:17:19.643+00:00","url":"https://junglewise.ai/threats/cve-2026-78165-deserialization-of-untrusted-data-vulnerability-in-apache-camel"}],"high":14,"name":"Apache Camel","rank":12,"slug":"camel","score":67,"vendor":{"hub":true,"name":"Apache","slug":"apache"},"critical":0,"max_cvss":8.8,"max_epss":null,"exploited":0,"vulnerabilities":39,"url":"https://junglewise.ai/threats/technologies/camel"},{"hub":true,"top":[{"cve":"CVE-2026-96639","cvss":9.8,"epss":0.0057,"slug":"cve-2026-96639-pillow-is-a-python-imaging-library-from-11-0-0-until-13-0-0-multi","title":"Pillow out-of-bounds write in multi-frame image loaders","severity":"critical","exploited":false,"published_at":"2026-10-21T21:20:32.217+00:00","url":"https://junglewise.ai/threats/cve-2026-96639-pillow-is-a-python-imaging-library-from-11-0-0-until-13-0-0-multi"},{"cve":"CVE-2026-112398","cvss":4,"epss":0.0057,"slug":"cve-2026-112398-pillow-is-a-python-imaging-library-prior-to-13-0-0-pillow-s","title":"Pillow FlashPix JPEG-tile decoder heap overflow","severity":"critical","exploited":false,"published_at":"2026-10-19T22:17:07.107+00:00","url":"https://junglewise.ai/threats/cve-2026-112398-pillow-is-a-python-imaging-library-prior-to-13-0-0-pillow-s"},{"cve":"CVE-2026-96778","cvss":4,"epss":0.004,"slug":"cve-2026-96778-pillow-is-a-python-imaging-library-from-9-4-0-until-13-0-0","title":"Pillow heap overflow in JPEG encoding with ICC profile","severity":"high","exploited":false,"published_at":"2026-10-21T21:20:33.093+00:00","url":"https://junglewise.ai/threats/cve-2026-96778-pillow-is-a-python-imaging-library-from-9-4-0-until-13-0-0"}],"high":14,"name":"Python Pillow Pillow","rank":13,"slug":"python-pillow-pillow","score":64,"vendor":{"hub":true,"name":"Python Pillow","slug":"python-pillow"},"critical":2,"max_cvss":9.8,"max_epss":0.0057,"exploited":0,"vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/python-pillow-pillow"},{"hub":true,"top":[{"cve":"CVE-2026-111815","cvss":10,"slug":"cve-2026-111815-apache-traffic-server-can-resume-a-tls-session-across-sni","title":"Apache Traffic Server TLS session resumption bypass of client certificate verification","severity":"critical","exploited":false,"published_at":"2026-10-21T20:17:23.33+00:00","url":"https://junglewise.ai/threats/cve-2026-111815-apache-traffic-server-can-resume-a-tls-session-across-sni"},{"cve":"CVE-2026-111814","cvss":10,"slug":"cve-2026-111814-apache-traffic-server-s-default-outbound-session-sharing-policy","title":"Apache Traffic Server TLS session reuse with mismatched client certificates","severity":"critical","exploited":false,"published_at":"2026-10-21T20:17:23.19+00:00","url":"https://junglewise.ai/threats/cve-2026-111814-apache-traffic-server-s-default-outbound-session-sharing-policy"},{"cve":"CVE-2026-111812","cvss":10,"slug":"cve-2026-111812-apache-traffic-server-s-origin-server-auth-plugin-lets-a-client","title":"Apache Traffic Server origin_server_auth AWS request signing bypass","severity":"critical","exploited":false,"published_at":"2026-10-21T20:17:23.06+00:00","url":"https://junglewise.ai/threats/cve-2026-111812-apache-traffic-server-s-origin-server-auth-plugin-lets-a-client"}],"high":6,"name":"Apache Traffic Server","rank":14,"slug":"traffic-server","score":62,"vendor":{"hub":true,"name":"Apache","slug":"apache"},"critical":7,"max_cvss":10,"max_epss":null,"exploited":0,"vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/traffic-server"},{"hub":true,"top":[{"cve":"CVE-2026-91622","cvss":9.3,"slug":"cve-2026-91622-vulnerability-in-the-oracle-agile-product-lifecycle-management","title":"Oracle Agile Product Lifecycle Management for Process authentication bypass","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:02.11+00:00","url":"https://junglewise.ai/threats/cve-2026-91622-vulnerability-in-the-oracle-agile-product-lifecycle-management"},{"cve":"CVE-2026-91624","cvss":9.1,"slug":"cve-2026-91624-vulnerability-in-the-oracle-agile-product-lifecycle-management","title":"Oracle Agile Product Lifecycle Management for Process unauthenticated data access","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:02.347+00:00","url":"https://junglewise.ai/threats/cve-2026-91624-vulnerability-in-the-oracle-agile-product-lifecycle-management"},{"cve":"CVE-2026-91550","cvss":8.8,"slug":"cve-2026-91550-vulnerability-in-the-oracle-agile-product-lifecycle-management","title":"Oracle Agile Product Lifecycle Management for Process privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:58.32+00:00","url":"https://junglewise.ai/threats/cve-2026-91550-vulnerability-in-the-oracle-agile-product-lifecycle-management"}],"high":14,"name":"Oracle Agile Product Lifecycle Management for Process","rank":15,"slug":"agile-product-lifecycle-management-for-process","score":59,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":2,"max_cvss":9.3,"max_epss":null,"exploited":0,"vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/agile-product-lifecycle-management-for-process"},{"hub":true,"top":[{"cve":"CVE-2026-60432","cvss":9.8,"slug":"cve-2026-60432-vulnerability-in-the-oracle-solaris-product-of-oracle-systems","title":"Oracle Solaris remote code execution in Image Packaging System","severity":"critical","exploited":false,"published_at":"2026-10-20T22:19:31.283+00:00","url":"https://junglewise.ai/threats/cve-2026-60432-vulnerability-in-the-oracle-solaris-product-of-oracle-systems"},{"cve":"CVE-2026-101537","cvss":9.8,"slug":"cve-2026-101537-vulnerability-in-the-oracle-solaris-product-of-oracle-systems","title":"Oracle Solaris remote code execution in Utility","severity":"critical","exploited":false,"published_at":"2026-10-20T22:18:03.127+00:00","url":"https://junglewise.ai/threats/cve-2026-101537-vulnerability-in-the-oracle-solaris-product-of-oracle-systems"},{"cve":"CVE-2026-47025","cvss":8.8,"slug":"cve-2026-47025-vulnerability-in-the-oracle-solaris-product-of-oracle-systems","title":"Oracle Solaris privilege escalation vulnerability in Utility component","severity":"high","exploited":false,"published_at":"2026-10-20T22:19:31.033+00:00","url":"https://junglewise.ai/threats/cve-2026-47025-vulnerability-in-the-oracle-solaris-product-of-oracle-systems"}],"high":12,"name":"Oracle Solaris","rank":16,"slug":"solaris","score":57,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":2,"max_cvss":9.8,"max_epss":null,"exploited":0,"vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/solaris"},{"hub":true,"top":[{"cve":"CVE-2026-91442","cvss":8.8,"slug":"cve-2026-91442-vulnerability-in-the-siebel-crm-deployment-product-of-oracle","title":"Oracle Siebel CRM Deployment privilege escalation in Server Infrastructure","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:47.79+00:00","url":"https://junglewise.ai/threats/cve-2026-91442-vulnerability-in-the-siebel-crm-deployment-product-of-oracle"},{"cve":"CVE-2026-91437","cvss":8.7,"slug":"cve-2026-91437-vulnerability-in-the-siebel-crm-deployment-product-of-oracle","title":"Oracle Siebel CRM Deployment data access vulnerability in Server Infrastructure","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:47.21+00:00","url":"https://junglewise.ai/threats/cve-2026-91437-vulnerability-in-the-siebel-crm-deployment-product-of-oracle"},{"cve":"CVE-2026-101459","cvss":8.3,"slug":"cve-2026-101459-vulnerability-in-the-siebel-crm-deployment-product-of-oracle","title":"Oracle Siebel CRM Deployment Server Infrastructure data manipulation","severity":"high","exploited":false,"published_at":"2026-10-20T22:17:54.67+00:00","url":"https://junglewise.ai/threats/cve-2026-101459-vulnerability-in-the-siebel-crm-deployment-product-of-oracle"}],"high":13,"name":"Oracle Siebel CRM Deployment","rank":17,"slug":"siebel-crm-deployment","score":55,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":0,"max_cvss":8.8,"max_epss":null,"exploited":0,"vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/siebel-crm-deployment"},{"hub":true,"top":[{"cve":"CVE-2026-114820","cvss":9.1,"slug":"cve-2026-114820-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk","title":"Oracle Java SE JSSE protocol handling vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-24T19:17:04.413+00:00","url":"https://junglewise.ai/threats/cve-2026-114820-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk"},{"cve":"CVE-2026-91403","cvss":9.1,"slug":"cve-2026-91403-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle","title":"Oracle Java SE JSSE remote data exposure and modification","severity":"critical","exploited":false,"published_at":"2026-10-21T22:16:50.243+00:00","url":"https://junglewise.ai/threats/cve-2026-91403-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle"},{"cve":"CVE-2026-91484","cvss":7.5,"slug":"cve-2026-91484-vulnerability-in-oracle-java-se-component-java-plugin-supported","title":"Oracle Java SE Java plugin sandbox escape","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:52.8+00:00","url":"https://junglewise.ai/threats/cve-2026-91484-vulnerability-in-oracle-java-se-component-java-plugin-supported"}],"high":2,"name":"Oracle Java SE","rank":18,"slug":"java-se","score":54,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":2,"max_cvss":9.1,"max_epss":null,"exploited":0,"vulnerabilities":40,"url":"https://junglewise.ai/threats/technologies/java-se"},{"hub":true,"top":[{"cve":"CVE-2026-109618","epss":0.9998,"slug":"cve-2026-109618-gcp-2026-070","title":"PHP Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.357+00:00","url":"https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070"},{"cve":"CVE-2026-112380","cvss":9.9,"slug":"cve-2026-112380-missing-authorization-in-the-whatsapp-group-channel-in-kiro-crew","title":"Kiro Crew missing authorization in WhatsApp group channel","severity":"critical","exploited":false,"published_at":"2026-10-20T20:17:16.553+00:00","url":"https://junglewise.ai/threats/cve-2026-112380-missing-authorization-in-the-whatsapp-group-channel-in-kiro-crew"},{"cve":"CVE-2026-115812","cvss":9.8,"slug":"cve-2026-115812-and-issue-in-amazon-web-services-multi-model-server","title":"Amazon Web Services Multi Model Server path traversal and SSRF","severity":"critical","exploited":false,"published_at":"2026-10-23T18:17:21.46+00:00","url":"https://junglewise.ai/threats/cve-2026-115812-and-issue-in-amazon-web-services-multi-model-server"}],"high":8,"name":"Amazon AWS","rank":19,"slug":"aws","score":52,"vendor":{"hub":true,"name":"Amazon","slug":"amazon"},"critical":3,"max_cvss":9.9,"max_epss":0.9998,"exploited":1,"vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/aws"},{"hub":true,"top":[{"cve":"CVE-2026-114089","cvss":8.8,"slug":"cve-2026-114089-trigger-dev-before-4-5-2-contains-a-cross-site-request-forgery","title":"Trigger.dev cross-site request forgery in CLI authorization flow","severity":"high","exploited":false,"published_at":"2026-10-21T01:17:33.763+00:00","url":"https://junglewise.ai/threats/cve-2026-114089-trigger-dev-before-4-5-2-contains-a-cross-site-request-forgery"},{"cve":"CVE-2026-114068","cvss":8.3,"slug":"cve-2026-114068-trigger-dev-before-4-6-0-contains-a-missing-authorization","title":"Trigger.dev missing authorization in waitpoint token endpoint","severity":"high","exploited":false,"published_at":"2026-10-21T01:17:30.41+00:00","url":"https://junglewise.ai/threats/cve-2026-114068-trigger-dev-before-4-6-0-contains-a-missing-authorization"},{"cve":"CVE-2026-114087","cvss":8.1,"slug":"cve-2026-114087-trigger-dev-before-4-5-6-self-hosted-docker-compose-deployments","title":"Trigger.dev authentication bypass via hardcoded secrets in Docker Compose","severity":"high","exploited":false,"published_at":"2026-10-21T01:17:33.45+00:00","url":"https://junglewise.ai/threats/cve-2026-114087-trigger-dev-before-4-5-6-self-hosted-docker-compose-deployments"}],"high":12,"name":"Trigger.dev","rank":20,"slug":"trigger-dev","score":48,"vendor":{"hub":true,"name":"Trigger.dev","slug":"trigger-dev"},"critical":0,"max_cvss":8.8,"max_epss":null,"exploited":0,"vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/trigger-dev"},{"hub":true,"top":[{"cve":"CVE-2026-57116","cvss":9.8,"slug":"cve-2026-57116-praisonai-agentos-remains-unauthenticated-after-incomplete-fix","title":"PraisonAI AgentOS authentication bypass in FastAPI deployment","severity":"critical","exploited":false,"published_at":"2026-10-23T13:17:10.69+00:00","url":"https://junglewise.ai/threats/cve-2026-57116-praisonai-agentos-remains-unauthenticated-after-incomplete-fix"},{"cve":"CVE-2026-57144","cvss":8.8,"slug":"cve-2026-57144-praisonai-sandlocksandbox-falls-back-to-unrestricted-subprocess","title":"PraisonAI sandbox escape when Landlock unavailable","severity":"high","exploited":false,"published_at":"2026-10-23T13:17:11.37+00:00","url":"https://junglewise.ai/threats/cve-2026-57144-praisonai-sandlocksandbox-falls-back-to-unrestricted-subprocess"},{"cve":"CVE-2026-57117","cvss":8.8,"slug":"cve-2026-57117-praisonai-compute-bridged-file-tools-allow-shell-command","title":"PraisonAI shell command injection in compute-bridged file tools","severity":"high","exploited":false,"published_at":"2026-10-23T13:17:10.87+00:00","url":"https://junglewise.ai/threats/cve-2026-57117-praisonai-compute-bridged-file-tools-allow-shell-command"}],"high":14,"name":"praisonai (PyPI)","rank":21,"slug":"pypi-praisonai","score":48,"vendor":{"hub":true,"name":"PyPI","slug":"pypi"},"critical":1,"max_cvss":9.8,"max_epss":null,"exploited":0,"vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/pypi-praisonai"},{"hub":true,"top":[{"cve":"CVE-2026-114820","cvss":9.1,"slug":"cve-2026-114820-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk","title":"Oracle Java SE JSSE protocol handling vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-24T19:17:04.413+00:00","url":"https://junglewise.ai/threats/cve-2026-114820-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk"},{"cve":"CVE-2026-91403","cvss":9.1,"slug":"cve-2026-91403-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle","title":"Oracle Java SE JSSE remote data exposure and modification","severity":"critical","exploited":false,"published_at":"2026-10-21T22:16:50.243+00:00","url":"https://junglewise.ai/threats/cve-2026-91403-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle"},{"cve":"CVE-2026-91415","cvss":7,"slug":"cve-2026-91415-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle","title":"Oracle Java SE 2D graphics denial of service and data access","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:44.937+00:00","url":"https://junglewise.ai/threats/cve-2026-91415-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle"}],"high":1,"name":"Oracle GraalVM Enterprise Edition","rank":22,"slug":"graalvm-enterprise-edition","score":47,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":2,"max_cvss":9.1,"max_epss":null,"exploited":0,"vulnerabilities":35,"url":"https://junglewise.ai/threats/technologies/graalvm-enterprise-edition"},{"hub":true,"top":[{"cve":"CVE-2026-114820","cvss":9.1,"slug":"cve-2026-114820-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk","title":"Oracle Java SE JSSE protocol handling vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-24T19:17:04.413+00:00","url":"https://junglewise.ai/threats/cve-2026-114820-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk"},{"cve":"CVE-2026-91403","cvss":9.1,"slug":"cve-2026-91403-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle","title":"Oracle Java SE JSSE remote data exposure and modification","severity":"critical","exploited":false,"published_at":"2026-10-21T22:16:50.243+00:00","url":"https://junglewise.ai/threats/cve-2026-91403-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle"},{"cve":"CVE-2026-91415","cvss":7,"slug":"cve-2026-91415-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle","title":"Oracle Java SE 2D graphics denial of service and data access","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:44.937+00:00","url":"https://junglewise.ai/threats/cve-2026-91415-vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle"}],"high":1,"name":"Oracle GraalVM for JDK","rank":23,"slug":"graalvm-for-jdk","score":45,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":2,"max_cvss":9.1,"max_epss":null,"exploited":0,"vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/graalvm-for-jdk"},{"hub":true,"top":[{"cve":"CVE-2026-101634","cvss":9.1,"slug":"cve-2026-101634-vulnerability-in-the-oracle-mobile-field-service-product-of","title":"Oracle Mobile Field Service remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-20T22:18:17.533+00:00","url":"https://junglewise.ai/threats/cve-2026-101634-vulnerability-in-the-oracle-mobile-field-service-product-of"},{"cve":"CVE-2026-101692","cvss":8.8,"slug":"cve-2026-101692-vulnerability-in-the-oracle-mobile-field-service-product-of","title":"Oracle Mobile Field Service privilege escalation in Admin UI","severity":"high","exploited":false,"published_at":"2026-10-20T22:18:23.72+00:00","url":"https://junglewise.ai/threats/cve-2026-101692-vulnerability-in-the-oracle-mobile-field-service-product-of"},{"cve":"CVE-2026-101664","cvss":8.8,"slug":"cve-2026-101664-vulnerability-in-the-oracle-mobile-field-service-product-of","title":"Oracle Mobile Field Service privilege escalation in E-Business Suite","severity":"high","exploited":false,"published_at":"2026-10-20T22:18:20.573+00:00","url":"https://junglewise.ai/threats/cve-2026-101664-vulnerability-in-the-oracle-mobile-field-service-product-of"}],"high":12,"name":"Oracle Mobile Field Service","rank":24,"slug":"mobile-field-service","score":45,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":1,"max_cvss":9.1,"max_epss":null,"exploited":0,"vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/mobile-field-service"},{"hub":true,"top":[{"cve":"CVE-2026-91241","cvss":9.1,"slug":"cve-2026-91241-vulnerability-in-the-oracle-business-intelligence-enterprise","title":"Oracle Business Intelligence Enterprise Edition takeover in Analytics Web Administration","severity":"critical","exploited":false,"published_at":"2026-10-20T22:20:24.937+00:00","url":"https://junglewise.ai/threats/cve-2026-91241-vulnerability-in-the-oracle-business-intelligence-enterprise"},{"cve":"CVE-2026-91535","cvss":8.8,"slug":"cve-2026-91535-vulnerability-in-the-oracle-business-intelligence-enterprise","title":"Oracle Business Intelligence Enterprise Edition privilege escalation in BI Search","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:57.183+00:00","url":"https://junglewise.ai/threats/cve-2026-91535-vulnerability-in-the-oracle-business-intelligence-enterprise"},{"cve":"CVE-2026-87263","cvss":8.8,"slug":"cve-2026-87263-vulnerability-in-the-oracle-business-intelligence-enterprise","title":"Oracle Business Intelligence Enterprise Edition remote compromise via Analytics Server","severity":"high","exploited":false,"published_at":"2026-10-20T22:20:05.82+00:00","url":"https://junglewise.ai/threats/cve-2026-87263-vulnerability-in-the-oracle-business-intelligence-enterprise"}],"high":10,"name":"Oracle Business Intelligence Enterprise Edition","rank":25,"slug":"business-intelligence-enterprise-edition","score":44,"vendor":{"hub":true,"name":"Oracle","slug":"oracle"},"critical":1,"max_cvss":9.1,"max_epss":null,"exploited":0,"vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition"}],"previous":{"key":"2026-10-12","top":"Microsoft Windows","period":{"end":"2026-10-18","start":"2026-10-12"},"totals":{"high":1770,"tracked":9509,"critical":274,"exploited":5,"technologies":2047,"vulnerabilities":4638},"url":"https://junglewise.ai/threats/weekly/2026-10-12"},"next":{"key":"2026-10-26","top":"Apple macOS Golden Gate","period":{"end":"2026-11-01","start":"2026-10-26"},"totals":{"high":749,"tracked":6763,"critical":198,"exploited":2,"technologies":1973,"vulnerabilities":3708},"url":"https://junglewise.ai/threats/weekly/2026-10-26"}}