Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-111603: PlayEdu: PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated…	4.3 Medium	5.3 Medium	N/A	Oct 16, 2026
CVE-2026-111392: sgl-project sglang: SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote…	4.8 Medium	6.3 Medium	N/A	Oct 16, 2026
CVE-2026-109839: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing…	3.1 Low	N/A	N/A	Oct 16, 2026
CVE-2026-109838: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of…	5.1 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-109588: FreeRTOS FreeRTOS-Kernel: Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on…	8.8 High	9.3 Critical	N/A	Oct 16, 2026
CVE-2026-109587: FreeRTOS FreeRTOS-Kernel: Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might…	8.8 High	9.3 Critical	N/A	Oct 16, 2026
CVE-2026-109461: Microsoft Microsoft Identity Client for NodeJS: Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to…	5.9 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-102552: FreeRTOS FreeRTOS-Plus-TCP: Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before…	5.9 Medium	8.2 High	N/A	Oct 16, 2026
CVE-2026-102551: FreeRTOS FreeRTOS-Plus-TCP: Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon…	7.7 High	9.2 Critical	N/A	Oct 16, 2026
CVE-2026-97380: MariaDB server: MariaDB server is a community developed fork of MySQL server	8.8 High	N/A	N/A	Oct 16, 2026
CVE-2026-92262: MariaDB server: MariaDB server is a community developed fork of MySQL server	9.9 Critical	N/A	N/A	Oct 16, 2026
CVE-2026-86047: MariaDB server: MariaDB server is a community developed fork of MySQL server	7.7 High	N/A	N/A	Oct 16, 2026
CVE-2026-86009: Mailu: Mailu is a mail server distributed as a set of Docker images	N/A	8.2 High	N/A	Oct 16, 2026
CVE-2026-86008: Mailu: Mailu is a mail server distributed as a set of Docker images	7.2 High	N/A	N/A	Oct 16, 2026
CVE-2026-85985: MariaDB server: MariaDB server is a community developed fork of MySQL server	5.4 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-85748: MariaDB server: MariaDB server is a community developed fork of MySQL server	9.9 Critical	N/A	N/A	Oct 16, 2026
CVE-2026-85746: MariaDB server: MariaDB server is a community developed fork of MySQL server	9.9 Critical	N/A	N/A	Oct 16, 2026
CVE-2026-85745: MariaDB server: MariaDB server is a community developed fork of MySQL server	4.3 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-77474: Dicklesworthstone destructive_command_guard: destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding…	7.1 High	N/A	N/A	Oct 16, 2026
CVE-2026-62362: PBH-BTN PeerBanHelper: PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules	4.9 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-59967: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists	5.4 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-59962: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists	6.5 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-57169: Finsys dockhand: Dockhand is a Docker management application	9.6 Critical	N/A	N/A	Oct 16, 2026
CVE-2026-49868: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…	9.8 Critical	N/A	N/A	Oct 16, 2026
CVE-2026-102693: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…	9.6 Critical	N/A	N/A	Oct 16, 2026

Rows per page

226-250 of 412906

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business