# Most vulnerable technologies: week of 2 to 8 November 2026 (week 45)

Source: https://junglewise.ai/threats/weekly/2026-11-02  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 10 November 2026, 00:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/weekly/2026-11-02.json  
License: CC BY 4.0 with a link back

In the week of 2 to 8 November 2026, Junglewise Threat Intelligence recorded 3,636 new vulnerabilities: 218 critical, 826 high and 7 exploited in the wild. The most vulnerable technology was IBM API Connect, with 205 vulnerabilities (47 critical), followed by Google Chrome (215) and OpenEMR (56).

## Ranking

| # | Technology | Vulns | Critical | High | Exploited | Max CVSS |
| --- | --- | --- | --- | --- | --- | --- |
| 1 | [IBM API Connect](https://junglewise.ai/threats/technologies/api-connect) (IBM) | 205 | 47 | 94 | 0 | 9.9 |
| 2 | [Google Chrome](https://junglewise.ai/threats/technologies/chrome) (Google) | 215 | 1 | 1 | 0 | 9.6 |
| 3 | [OpenEMR](https://junglewise.ai/threats/technologies/openemr-openemr) (OpenEMR) | 56 | 5 | 28 | 0 | 9.9 |
| 4 | [Google Android](https://junglewise.ai/threats/technologies/android) (Google) | 117 | 0 | 1 | 0 | 8.4 |
| 5 | [Hpe Networking Fabric Composer](https://junglewise.ai/threats/technologies/networking-fabric-composer) (Hpe) | 41 | 3 | 20 | 0 | 9.8 |
| 6 | [Linux Kernel](https://junglewise.ai/threats/technologies/kernel) (Linux) | 75 | 0 | 10 | 0 | 7.8 |
| 7 | [Kyverno](https://junglewise.ai/threats/technologies/kyverno) (Kyverno) | 22 | 8 | 13 | 0 | 9.9 |
| 8 | [SuiteCRM](https://junglewise.ai/threats/technologies/suitecrm-suitecrm) (SuiteCRM) | 31 | 1 | 21 | 0 | 9.9 |
| 9 | [SignalWire Freeswitch](https://junglewise.ai/threats/technologies/freeswitch) (SignalWire) | 19 | 3 | 11 | 1 | 9.8 |
| 10 | [FreeRDP](https://junglewise.ai/threats/technologies/freerdp) (FreeRDP) | 31 | 2 | 8 | 0 | 9.8 |
| 11 | [Quest Foglight for Databases](https://junglewise.ai/threats/technologies/foglight-for-databases) (Quest) | 16 | 3 | 12 | 0 | 9.8 |
| 12 | [TOTOLINK CA300-PoE](https://junglewise.ai/threats/technologies/ca300-poe) (TOTOLINK) | 9 | 9 | 0 | 0 | 9.9 |
| 13 | [Red Hat Keycloak](https://junglewise.ai/threats/technologies/red-hat-keycloak) (Red Hat) | 20 | 2 | 11 | 0 | 9.1 |
| 14 | [Jetbrains IntelliJ IDEA](https://junglewise.ai/threats/technologies/intellij-idea) (Jetbrains) | 24 | 0 | 13 | 0 | 8.2 |
| 15 | [Amazon AWS](https://junglewise.ai/threats/technologies/aws) (Amazon) | 13 | 2 | 11 | 0 | 9.9 |
| 16 | [Apache Ofbiz](https://junglewise.ai/threats/technologies/ofbiz) (Apache) | 43 | 0 | 0 | 0 | n/a |
| 17 | [github.com/canonical/lxd (Go)](https://junglewise.ai/threats/technologies/github-com-canonical-lxd) (Go) | 8 | 6 | 2 | 0 | 9.9 |
| 18 | [Hickory-Dns Hickory-Proto](https://junglewise.ai/threats/technologies/hickory-dns-hickory-proto) (Hickory-Dns) | 18 | 0 | 10 | 0 | 8.8 |
| 19 | [Chartbrew](https://junglewise.ai/threats/technologies/chartbrew-chartbrew) (Chartbrew) | 11 | 3 | 5 | 0 | 9.8 |
| 20 | [Vikunja](https://junglewise.ai/threats/technologies/vikunja) (Vikunja) | 29 | 0 | 3 | 0 | 8.8 |
| 21 | [Jetbrains Datalore](https://junglewise.ai/threats/technologies/datalore) (Jetbrains) | 16 | 1 | 5 | 0 | 9 |
| 22 | [Wavlink WN536AX6-A](https://junglewise.ai/threats/technologies/wn536ax6-a) (Wavlink) | 6 | 5 | 0 | 0 | 10 |
| 23 | [IBM Mq](https://junglewise.ai/threats/technologies/mq) (IBM) | 11 | 0 | 9 | 0 | 8.8 |
| 24 | [Open Identity Platform OpenAM](https://junglewise.ai/threats/technologies/openam) (Open Identity Platform) | 13 | 3 | 0 | 0 | 10 |
| 25 | [MediaTek Modem](https://junglewise.ai/threats/technologies/modem) (MediaTek) | 27 | 0 | 0 | 0 | n/a |

## Most affected vendors

1. [IBM](https://junglewise.ai/threats/vendors/ibm): 309 vulnerabilities, 55 critical, 1 exploited
2. [Google](https://junglewise.ai/threats/vendors/google): 352 vulnerabilities, 2 critical, 0 exploited
3. [Jetbrains](https://junglewise.ai/threats/vendors/jetbrains): 72 vulnerabilities, 4 critical, 0 exploited
4. [OpenEMR](https://junglewise.ai/threats/vendors/openemr): 56 vulnerabilities, 5 critical, 0 exploited
5. [Hpe](https://junglewise.ai/threats/vendors/hpe): 51 vulnerabilities, 3 critical, 0 exploited
6. [Apache](https://junglewise.ai/threats/vendors/apache): 95 vulnerabilities, 0 critical, 0 exploited
7. [Linux](https://junglewise.ai/threats/vendors/linux): 71 vulnerabilities, 0 critical, 0 exploited
8. [Kyverno](https://junglewise.ai/threats/vendors/kyverno): 22 vulnerabilities, 8 critical, 0 exploited
9. [SuiteCRM](https://junglewise.ai/threats/vendors/suitecrm): 31 vulnerabilities, 1 critical, 0 exploited
10. [TOTOLINK](https://junglewise.ai/threats/vendors/totolink): 13 vulnerabilities, 13 critical, 0 exploited

## Most severe vulnerabilities

- [CVE-2026-116779: FreeSWITCH command injection via SIP MESSAGE chat protocol](https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, exploited in the wild, CVSS 9.8, published 5 Nov 2026)
- [CVE-2026-123218: IBM Aspera Faspex authorization bypass](https://junglewise.ai/threats/cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized) (critical, exploited in the wild, CVSS 9.8, published 7 Nov 2026)
- [CVE-2026-102895: GPUStack authentication bypass via localhost spoofing](https://junglewise.ai/threats/cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model) (critical, exploited in the wild, CVSS 9.8, published 4 Nov 2026)
- [CVE-2026-123158: OpenSSH password authentication bypass on musl libc without PAM](https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used) (critical, exploited in the wild, CVSS 8.1, published 5 Nov 2026)
- [CVE-2026-118527: Ivanti Connect Secure predictable identifier generation](https://junglewise.ai/threats/cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or) (critical, exploited in the wild, CVSS 4.3, published 3 Nov 2026)
- [CVE-2024-27834: Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass](https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability) (critical, exploited in the wild, published 4 Nov 2026)
- [CVE-2026-19868: SonicWall SonicOS SSLVPN SAML authentication bypass](https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn) (critical, exploited in the wild, published 6 Nov 2026)
- [CVE-2026-123551: OpenAM unauthenticated session token disclosure via WebSocket](https://junglewise.ai/threats/cve-2026-123551-openam-from-14-0-0-before-16-1-4-contains-an-information) (critical, CVSS 10, published 8 Nov 2026)
- [CVE-2026-123966: Tenda AC19 heap buffer overflow in saveParentControlInfo](https://junglewise.ai/threats/cve-2026-123966-a-vulnerability-was-determined-in-tenda-ac19-16-03-10-07) (critical, CVSS 10, published 7 Nov 2026)
- [CVE-2026-109469: Microsoft Entra Device Registration authorization bypass in key validation](https://junglewise.ai/threats/cve-2026-109469-authorization-bypass-through-user-controlled-key-in-entra-device) (critical, CVSS 10, published 6 Nov 2026)

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Most vulnerable technologies: week of 2 to 8 November 2026 (week 45)", https://junglewise.ai/threats/weekly/2026-11-02, 10 November 2026.