Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-112316: Red Hat: xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on…	6.5 Medium	N/A	N/A	Nov 9, 2026
CVE-2026-123803: supertokens supertokens-core: SuperTokens Core is an open source authentication server	8.1 High	N/A	N/A	Nov 9, 2026
CVE-2026-112322: Red Hat: clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client…	7.5 High	N/A	N/A	Nov 9, 2026
CVE-2026-124000: nasa-jpl ION-DTN: NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message…	5.3 Medium	6.9 Medium	N/A	Nov 9, 2026
CVE-2026-125063: Red Hat Red Hat Ansible Automation Platform 2: A flaw was found in the rrule validation of schedules in automation controller	4.3 Medium	N/A	N/A	Nov 9, 2026
CVE-2026-123799: supertokens supertokens-core: SuperTokens Core is an open source authentication server	7.4 High	N/A	N/A	Nov 9, 2026
CVE-2026-84503: Red Hat: A flaw was found in ansible-core's ansible.builtin.git module	6.7 Medium	N/A	N/A	Nov 9, 2026
CVE-2026-123797: supertokens supertokens-core: SuperTokens Core is an open source authentication server	7.5 High	N/A	N/A	Nov 9, 2026
CVE-2026-60117: KasemJaffer receive_sharing_intent: The Android implementation of the Flutter/Dart receive_sharing_intent package, versions 1.4.1 through 1.9.0, contains a…	6.2 Medium	6.9 Medium	N/A	Nov 9, 2026
CVE-2026-123796: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment	N/A	2.3 Low	N/A	Nov 9, 2026
CVE-2026-123373: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment	N/A	2.3 Low	N/A	Nov 9, 2026
CVE-2026-123270: Redpanda Data Connect: Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated…	N/A	N/A	N/A	Nov 9, 2026
CVE-2026-123372: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment	N/A	2.3 Low	N/A	Nov 9, 2026
CVE-2026-123371: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment	N/A	2.3 Low	N/A	Nov 9, 2026
CVE-2026-123370: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment	N/A	5.1 Medium	N/A	Nov 9, 2026
CVE-2026-123369: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment	N/A	5.3 Medium	N/A	Nov 9, 2026
CVE-2026-119756: arendst Tasmota: Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in…	9.8 Critical	9.3 Critical	N/A	Nov 9, 2026
CVE-2026-119755: arendst Tasmota: Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows…	7.5 High	7.5 High	N/A	Nov 9, 2026
CVE-2026-123368: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment	N/A	2.3 Low	N/A	Nov 9, 2026
CVE-2026-123367: thorvg: Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine	7.4 High	N/A	N/A	Nov 9, 2026
CVE-2026-19706: Red Hat: During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation	8.3 High	N/A	N/A	Nov 9, 2026
CVE-2026-123364: OctoPrint: OctoPrint provides a web interface for controlling consumer 3D printers	N/A	2.4 Low	N/A	Nov 9, 2026
CVE-2026-104989: Chaos Software V-Ray Swarm: Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows…	N/A	9.3 Critical	N/A	Nov 9, 2026
CVE-2026-121576: AtlasAiDev MCP Server for WordPress: Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub…	8.8 High	N/A	N/A	Nov 9, 2026
CVE-2026-122664: VideoWhisper.com Broadcast Live Video: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com…	7.1 High	N/A	N/A	Nov 9, 2026

25 rows per page

226-250 of 427771

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business