I’ve never seen this many critical (score of 10) vulnerabilities in one week with such widespread possible impact. There were 27 this week across 10 products! 1. HPE Aruba Wi-Fi systems: This is the equipment behind a lot of business Wi-Fi 2. Apache Traffic Server: Behind-the-scenes software that sits at the edge of content delivery networks, and inside large companies to route their web traffic. 3. GitLab: Where many companies store and build the code for their apps. An attacker could run their own commands on a company's GitLab server without ever logging in, and it affects every version going back to 2014. 4. Oracle business software; The affected systems handle logins, finance, databases, and other core operations at large companies. 5. Microsoft cloud services: A troubleshooting tool for virtual computers in Microsoft's Azure cloud, a service that manages app setups on Azure, and the gateway that lets employees reach internal company apps from outside the office. 6. IBM DataStage: A tool companies use to move and process large amounts of data on IBM's shared platform. 7. Apache Pulsar Manager: The control panel for a system apps use to pass messages and data to each other. Outsiders can create their own administrator accounts and steal credentials. 8. Mercury: A tool that turns data scientists' working files into shareable web apps and dashboards. 9. YOOtheme Pro for Joomla. A popular website design add-on. 10. WP Mailster for WordPress. A plugin that runs email lists on WordPress sites. Honorary mention, are those of PHP, the programming language behind nearly 70% of websites, had two serious flaws this week that scored just below 10. There’s a third vulnerability with no fix yet.