Status of High-Risk Vulnerabilities
| No. | Vulnerability No. (CVE) | Content | CVSS | Risk Level |
|---|---|---|---|---|
| 1 | CVE-2026-22557 | UniFi Network Application Path Traversal | 10 | CRITICAL |
| 2 | CVE-2026-21628 | Astroid Framework Malicious File Upload | 10 | CRITICAL |
| 3 | CVE-2026-33937 | Handlebars Remote Code Execution | 9.8 | CRITICAL |
| 4 | CVE-2026-32767 | SiYuan SQL Injection | 9.8 | CRITICAL |
| 5 | CVE-2026-0770 | Langflow Remote Code Execution | 9.8 | CRITICAL |
| 6 | CVE-2026-30457 | Bludit CMS Remote Code Execution | 9.8 | CRITICAL |
| 7 | CVE-2026-1115 | parisneo/lollms Cross-Site Scripting | 9.6 | CRITICAL |
| 8 | CVE-2026-33017 | Langflow Remote Code Execution | 9.3 | CRITICAL |
| 9 | CVE-2026-32940 | SiYuan Cross-Site Scripting | 9.3 | CRITICAL |
| 10 | CVE-2026-32238 | OpenEMR Command Injection | 9.1 | CRITICAL |
Distribution of Web Application Attack Types
| No. | Attack Type | % | Key Features and Purpose |
|---|---|---|---|
| 1 | SQL Injection | 42.03 | Database manipulation, privilege escalation, and sensitive data exfiltration |
| 2 | System File Access | 19.79 | Unauthorized access attempts to internal server files and directories |
| 3 | Application Vulnerability | 12.35 | Exploitation of application-level flaws (insufficient authentication, misconfigurations) |
| 4 | Default Page | 8.05 | Collection of system information through exposure of default configuration pages |
| 5 | Bad User-Agent | 7.57 | Automated reconnaissance activities using malicious scanners or bots |
Major Attack Detection by Industry
| No. | Industry | Total | First Attack Type | Second Attack Type |
|---|---|---|---|---|
| 1 | Education Industry | 5,730,000 cases | SQL Injection ~ 3,000,000 cases | System File Access – 1,530,000 cases |
| 2 | Service Industry | 4,000,000 cases | SQL Injection ~ 1,840,000 cases | System File Access – 700,000 cases |
| 3 | Manufacturing Industry | 2,040,000 cases | Default Page ~ 580,000 cases | System File Access – 470,000 cases |
| 4 | Public Institutions | 1,370,000 cases | SQL Injection ~ 500,000 cases | System File Access – 340,000 cases |
The Threat Intelligence Report provides the latest web vulnerability analyses, industry-specific attack patterns,
and key CVE-based vulnerability information, all based on processed data from the AI/ML-powered threat intelligence platform AILabs.
Subscribe to receive the full monthly Threat Intelligence Report!
[ Subscribe → ]
