Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-98881: Linux: In the Linux kernel, the following vulnerability has been resolved: net: bridge: remove stale rcu_barrier() in…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98880: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: handle set_blocksize failures ntfs3 uses…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98879: Linux: In the Linux kernel, the following vulnerability has been resolved: isofs: handle set_blocksize failures isofs uses…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98878: Linux: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Immediately exec priority drop…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98877: Linux: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't advertise VLPIs if no ITS is…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98876: Linux: In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98875: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98874: Linux: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98873: Linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98872: Linux: In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG() on unknown typed-extent type…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98871: Linux: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98870: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-115727: Fosowl AgenticSeek: AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes…	8.1 High	9.2 Critical	N/A	Oct 23, 2026
CVE-2026-115726: Aider-AI aider: Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by…	7.8 High	8.5 High	N/A	Oct 23, 2026
CVE-2026-115725: chatwoot: Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access…	4.2 Medium	2.3 Low	N/A	Oct 23, 2026
CVE-2026-115724: VideoLAN VLC for Android: VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts…	2.9 Low	2.1 Low	N/A	Oct 23, 2026
CVE-2026-115723: davenardella snap7: Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active…	7.4 High	8.3 High	N/A	Oct 23, 2026
CVE-2026-115722: diegonehab rply: RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts…	6.1 Medium	6.9 Medium	N/A	Oct 23, 2026
CVE-2026-107685: agentjido req_llm: Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path…	N/A	9.1 Critical	N/A	Oct 23, 2026
CVE-2026-95620: qt: A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a…	N/A	2.1 Low	N/A	Oct 23, 2026
CVE-2026-94263: Unknown: The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7…	4.8 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-111965: Unknown Profile Builder: The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment…	4.3 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-105963: elixir-plug: Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug…	N/A	5.1 Medium	N/A	Oct 23, 2026
CVE-2026-16762: qt: An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate…	N/A	8.7 High	N/A	Oct 23, 2026
CVE-2026-89320: Eclipse Foundation Eclipse KeyPont - GOSE: `HmacShaCryptor.Hash` never hashed its input	N/A	8.8 High	N/A	Oct 23, 2026

Rows per page

226-250 of 545063

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business