Weekly report
Most vulnerable technologies: week of 26 October to 1 November 2026 (week 44)
Final report, published . It does not change.
In the week of 26 October to 1 November 2026, Junglewise Threat Intelligence recorded 3,708 new vulnerabilities: 198 critical, 749 high and 2 exploited in the wild. The most vulnerable technology was Apple macOS Golden Gate, with 246 vulnerabilities (0 critical), followed by Apple macOS (219) and Apple iPadOS (176).
- New vulnerabilities
- 3,708
- Critical
- 198
- Exploited in the wild
- 2
- Technologies affected
- 1,973
Ranking
Most affected vendors
- 1.Apple322 vulnerabilities, 0 critical, 0 exploited
- 2.Mozilla176 vulnerabilities, 0 critical, 0 exploited
- 3.Dell58 vulnerabilities, 7 critical, 0 exploited
- 4.Linux119 vulnerabilities, 0 critical, 0 exploited
- 5.Hitachi19 vulnerabilities, 18 critical, 0 exploited
- 6.Drupal106 vulnerabilities, 0 critical, 0 exploited
- 7.Packagist:Https://Packages.drupal.org/897 vulnerabilities, 0 critical, 0 exploited
- 8.Google83 vulnerabilities, 0 critical, 0 exploited
- 9.IBM32 vulnerabilities, 6 critical, 0 exploited
- 10.Wavlink12 vulnerabilities, 12 critical, 0 exploited
Most severe vulnerabilities
- CVE-2026-76418: Cisco Secure Firewall ASA and FTD SSL VPN denial of servicecriticalexploited in the wildCVSS 8.6EPSS 0.6%
- CVE-2026-118527: Ivanti Connect Secure predictable identifier generationcriticalexploited in the wild
- CVE-2026-120198: WAVLINK WL-WN530BE1-A command injection in protocol.cspcriticalCVSS 10EPSS 2.1%
- CVE-2026-120338: Prefab UI sandbox escape via unrestricted Deno permissionscriticalCVSS 10
- CVE-2026-120195: WAVLINK WL-WN579A3-A command injection in Initial Setup WizardcriticalCVSS 10
- CVE-2026-120189: D-Link DIR-505 stack-based buffer overflow in TFTP upload handlercriticalCVSS 10
- CVE-2026-61826: Bazarr Plex OAuth authentication bypasscriticalCVSS 10
- CVE-2026-61738: SOCFortress CoPilot path traversal in ScoutSuite report uploadcriticalCVSS 10
- CVE-2026-84295: Progress Software WS_FTP Server authentication bypasscriticalCVSS 10
- CVE-2026-61991: Ajax Load More Cache remote code executioncriticalCVSS 10
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
Technologies are ranked by a score: 10 points for each vulnerability exploited in the wild, 5 for each critical, 2 for each high and 1 for every vulnerability. A vulnerability counts once for every technology it affects, so one advisory can appear under several products.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/weekly/2026-10-26.json, and this page as text at https://junglewise.ai/threats/weekly/2026-10-26.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies: week of 26 October to 1 November 2026 (week 44)", https://junglewise.ai/threats/weekly/2026-10-26, 3 November 2026.