Weekly report
Most vulnerable technologies: week of 2 to 8 November 2026 (week 45)
Final report, published . It does not change.
In the week of 2 to 8 November 2026, Junglewise Threat Intelligence recorded 3,636 new vulnerabilities: 218 critical, 826 high and 7 exploited in the wild. The most vulnerable technology was IBM API Connect, with 205 vulnerabilities (47 critical), followed by Google Chrome (215) and OpenEMR (56).
- New vulnerabilities
- 3,636
- Critical
- 218
- Exploited in the wild
- 7
- Technologies affected
- 1,784
Ranking
Most affected vendors
- 1.IBM309 vulnerabilities, 55 critical, 1 exploited
- 2.Google352 vulnerabilities, 2 critical, 0 exploited
- 3.Jetbrains72 vulnerabilities, 4 critical, 0 exploited
- 4.OpenEMR56 vulnerabilities, 5 critical, 0 exploited
- 5.Hpe51 vulnerabilities, 3 critical, 0 exploited
- 6.Apache95 vulnerabilities, 0 critical, 0 exploited
- 7.Linux71 vulnerabilities, 0 critical, 0 exploited
- 8.Kyverno22 vulnerabilities, 8 critical, 0 exploited
- 9.SuiteCRM31 vulnerabilities, 1 critical, 0 exploited
- 10.TOTOLINK13 vulnerabilities, 13 critical, 0 exploited
Most severe vulnerabilities
- CVE-2026-116779: FreeSWITCH command injection via SIP MESSAGE chat protocolcriticalexploited in the wildCVSS 9.8EPSS 1.3%
- CVE-2026-123218: IBM Aspera Faspex authorization bypasscriticalexploited in the wildCVSS 9.8EPSS 0.4%
- CVE-2026-102895: GPUStack authentication bypass via localhost spoofingcriticalexploited in the wildCVSS 9.8EPSS 0.3%
- CVE-2026-123158: OpenSSH password authentication bypass on musl libc without PAMcriticalexploited in the wildCVSS 8.1EPSS 1.0%
- CVE-2026-118527: Ivanti Connect Secure predictable identifier generationcriticalexploited in the wildCVSS 4.3
- CVE-2024-27834: Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypasscriticalexploited in the wildEPSS 0.6%
- CVE-2026-19868: SonicWall SonicOS SSLVPN SAML authentication bypasscriticalexploited in the wild
- CVE-2026-123551: OpenAM unauthenticated session token disclosure via WebSocketcriticalCVSS 10
- CVE-2026-123966: Tenda AC19 heap buffer overflow in saveParentControlInfocriticalCVSS 10
- CVE-2026-109469: Microsoft Entra Device Registration authorization bypass in key validationcriticalCVSS 10
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
Technologies are ranked by a score: 10 points for each vulnerability exploited in the wild, 5 for each critical, 2 for each high and 1 for every vulnerability. A vulnerability counts once for every technology it affects, so one advisory can appear under several products.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/weekly/2026-11-02.json, and this page as text at https://junglewise.ai/threats/weekly/2026-11-02.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies: week of 2 to 8 November 2026 (week 45)", https://junglewise.ai/threats/weekly/2026-11-02, 10 November 2026.