Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-82233: Improper Limitation of a Pathname to a Restricted Directory	5.7 Medium	6.9 Medium	0%	Aug 28, 2026
CVE-2026-50152: Improper Authorization	9.1 Critical	N/A	0%	Aug 28, 2026
CVE-2026-59297: Origin Validation Error	3.5 Low	N/A	0%	Aug 27, 2026
CVE-2026-54732: Improper Limitation of a Pathname to a Restricted Directory	6.5 Medium	N/A	0%	Aug 27, 2026
CVE-2026-80212: Allocation of Resources Without Limits or Throttling	7.5 High	N/A	0%	Aug 27, 2026
CVE-2026-74232: Embedded Malicious Code	9.8 Critical	9.3 Critical	1%	Aug 27, 2026
CVE-2026-54548: Improper Certificate Validation	3.3 Low	N/A	0%	Aug 26, 2026
CVE-2026-58094: Time-of-check Time-of-use (TOCTOU) Race Condition	7.8 High	N/A	0%	Aug 26, 2026
CVE-2026-77585: Improper Neutralization of Special Elements used in an OS Command	5.3 Medium	N/A	0%	Aug 25, 2026
CVE-2026-55582: Improper Neutralization of Special Elements used in an OS Command	8.4 High	N/A	0%	Aug 25, 2026
CVE-2026-71364: Improper Limitation of a Pathname to a Restricted Directory	7.2 High	N/A	2%	Aug 24, 2026
CVE-2026-49114: Time-of-check Time-of-use (TOCTOU) Race Condition	7.1 High	6.8 Medium	0%	Aug 21, 2026
CVE-2026-43798: Stack-based Buffer Overflow	9.8 Critical	N/A	0%	Aug 20, 2026
CVE-2026-53587: Improper Input Validation	7.5 High	N/A	0%	Aug 20, 2026
CVE-2026-49996: URL Redirection to Untrusted Site	3.7 Low	N/A	0%	Aug 20, 2026
CVE-2026-76918: Heap-based Buffer Overflow	5.5 Medium	N/A	0%	Aug 19, 2026
CVE-2026-53549: Server-Side Request Forgery (SSRF)	7.7 High	N/A	0%	Aug 19, 2026
CVE-2026-53548: Improper Authorization	9.6 Critical	N/A	0%	Aug 19, 2026
CVE-2026-53547: Missing Authorization	8.8 High	N/A	1%	Aug 19, 2026
CVE-2026-53546: Authorization Bypass Through User-Controlled Key	9.6 Critical	N/A	0%	Aug 19, 2026
CVE-2026-53545: Improper Neutralization of Special Elements used in an OS Command	9.8 Critical	N/A	1%	Aug 19, 2026
CVE-2026-53542: Improper Neutralization of Special Elements used in an OS Command	8.8 High	N/A	1%	Aug 19, 2026
CVE-2026-20177: Allocation of Resources Without Limits or Throttling	5.3 Medium	N/A	1%	Aug 19, 2026
CVE-2026-49255: Improper Neutralization of Special Elements used in an OS Command	8.8 High	N/A	1%	Aug 19, 2026
CVE-2026-49253: Improper Limitation of a Pathname to a Restricted Directory	7.1 High	N/A	0%	Aug 19, 2026

25 rows per page

226-250 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report