Status of High-Risk Vulnerabilities
| No. | Vulnerability No. (CVE) | Content | CVSS | Risk Level |
|---|---|---|---|---|
| 1 | CVE-2026-72898 | Metabase Unauthenticated SQL Injection | 10 | CRITICAL |
| 2 | CVE-2026-58231 | SAP Commerce Cloud Unauthenticated Code Injection | 10 | CRITICAL |
| 3 | CVE-2026-48362 | Adobe ColdFusion OS Command Injection | 10 | CRITICAL |
| 4 | CVE-2026-18051 | W3 Total Cache Unauthenticated Arbitrary File Write | 10 | CRITICAL |
| 5 | CVE-2026-74253 | Joomla Sourcerer Unauthenticated Remote Code Execution | 10 | CRITICAL |
| 6 | CVE-2026-20030 | Cisco Crosswork SQL Injection | 10 | CRITICAL |
| 7 | CVE-2026-18885 | ServiceNow AI Platform Unauthenticated Code Injection | 10 | CRITICAL |
| 8 | CVE-2026-76604 | Joomla Fabrik Unauthenticated Remote Code Execution | 10 | CRITICAL |
| 9 | CVE-2026-77998 | miniOrange SAML SSO Unauthenticated Authentication Bypass | 10 | CRITICAL |
| 10 | CVE-2026-77537 | Ubiquiti UniFi Protect Command Injection | 10 | CRITICAL |
Distribution of Web Application Attack Types
| No. | Attack Type | % | Key Features and Purpose |
|---|---|---|---|
| 1 | SQL Injection | 39.33 | Database manipulation, privilege escalation, and sensitive data exfiltration |
| 2 | System File Access | 24.71 | Unauthorized attempts to access internal server files and directories |
| 3 | Default Page | 12.35 | Collection of system information through exposure of default configuration pages |
| 4 | Application Vulnerability | 11.54 | Exploitation of application-level flaws (insufficient authentication, misconfigurations) |
| 5 | Directory Traversal | 3.5 | Attempts to access sensitive files through path manipulation |
Major Attack Detection by Industry
| No. | Industry | Total | First Attack Type | Second Attack Type |
|---|---|---|---|---|
| 1 | Education Industry | 6,880,000 cases | SQL Injection ~ 2,800,000 cases | System File Access ~ 2,000,000 cases |
| 2 | Service Industry | 5,650,000 cases | SQL Injection ~ 2,450,000 cases | System File Access ~ 1,430,000 cases |
| 3 | Manufacturing Industry | 4,190,000 cases | Default Page ~ 1,510,000 cases | System File Access ~ 1,100,000 cases |
| 4 | Public Institutions | 1,380,000 cases | System File Access ~ 520,000 cases | SQL Injection ~ 340,000 cases |
The Threat Intelligence Report provides the latest web vulnerability analyses, industry-specific attack patterns, and key CVE-based vulnerability information, all based on processed data from the AI/ML-powered threat intelligence platform AILabs.
Subscribe to receive the full monthly Threat Intelligence Report!
[ Subscribe → ]
