Status of High-Risk Vulnerabilities
| No. | Vulnerability No. (CVE) | Content | CVSS | Risk Level |
|---|---|---|---|---|
| 1 | CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass | 10 | CRITICAL |
| 2 | CVE-2026-43898 | SandboxJS Sandbox Escape RCE | 10 | CRITICAL |
| 3 | CVE-2026-45102 | OneUptime Sandbox Escape RCE | 9.9 | CRITICAL |
| 4 | CVE-2026-0300 | Palo Alto Networks PAN-OS User-ID Authentication Portal | 9.8 | CRITICAL |
| 5 | CVE-2026-8181 | WordPress Burst Statistics Plugin Authentication Bypass | 9.8 | CRITICAL |
| 6 | CVE-2026-34187 | Pandora FMS SQL Injection | 9.8 | CRITICAL |
| 7 | CVE-2026-44183 | Cleanuparr Authentication Bypass | 9.8 | CRITICAL |
| 8 | CVE-2026-24207 | NVIDIA Triton Inference Server Authentication Bypass | 9.8 | CRITICAL |
| 9 | CVE-2026-33278 | NLnet Labs Unbound DNSSEC Improper Validation | 9.8 | CRITICAL |
| 10 | CVE-2026-25244 | WebdriverIO Command Injection RCE | 9.8 | CRITICAL |
Distribution of Web Application Attack Types
| No. | Attack Type | % | Key Features and Purpose |
|---|---|---|---|
| 1 | SQL Injection | 42.36 | Database manipulation, privilege escalation, and sensitive data exfiltration |
| 2 | System File Access | 22.14 | Unauthorized attempts to access internal server files and directories |
| 3 | Application Vulnerability | 15.15 | Exploitation of application-level flaws (insufficient authentication, misconfigurations) |
| 4 | Default Page | 8.62 | Collection of system information through exposure of default configuration pages |
| 5 | Directory Traversal | 4.1 | Attempts to access sensitive files through path manipulation |
Major Attack Detection by Industry
| No. | Industry | Total | First Attack Type | Second Attack Type |
|---|---|---|---|---|
| 1 | Service Industry | 4,740,000 cases | SQL Injection ~ 2,970,000 cases | Application Vulnerability – 690,000 cases |
| 2 | Education Industry | 3,770,000 cases | System File Access ~ 1,440,000 cases | SQL Injection – 1,030,000 cases |
| 3 | Manufacturing Industry | 2,360,000 cases | Default Page ~ 670,000 cases | System File Access – 550,000 cases |
| 4 | Public Institutions | 1,890,000 cases | SQL Injection ~ 640,000 cases | System File Access – 420,000 cases |
The Threat Intelligence Report provides the latest web vulnerability analyses, industry-specific attack patterns,
and key CVE-based vulnerability information, all based on processed data from the AI/ML-powered threat intelligence platform AILabs.
Subscribe to receive the full monthly Threat Intelligence Report!
[ Subscribe → ]
