The CVE Watchtower: Weekly Threat Intelligence Briefing (May 11 – May 17, 2026)

Weekly vulnerability digest (May 11–17, 2026) reports 1,975 new disclosures including 156 Critical and 773 High-severity flaws, and highlights six vulnerabilities being actively exploited in the wild — notably CVE-2026-20182 (Cisco Catalyst SD-WAN Controller, CVSS 10.0) and CVE-2026-42897 (Microsoft Exchange OWA XSS) — while urging immediate patching, network isolation, and audits of mail servers, WordPress plugins, and AI APIs.