Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-76994: Apache Software Foundation Apache Answer: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-71563: Apache Software Foundation Apache Answer: Missing Authorization vulnerability in Apache Answer	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-68482: Apache Software Foundation Apache Answer: Missing Authorization vulnerability in Apache Answer	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-67249: Apache Software Foundation Apache Answer: A vulnerability in Apache Answer	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-64945: Apache Software Foundation Apache Answer: A vulnerability in Apache Answer	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-64944: Apache Software Foundation Apache Answer: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-64943: Apache Software Foundation Apache Answer: Insertion of Sensitive Information into Log File vulnerability in Apache Answer	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-112192: MISP: MISP contains a vulnerability in the handling of module plugin settings	N/A	5.3 Medium	N/A	Oct 19, 2026
CVE-2026-112188: MISP: MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve…	N/A	7.1 High	N/A	Oct 19, 2026
CVE-2026-112184: MISP: MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface	N/A	4.8 Medium	N/A	Oct 19, 2026
CVE-2026-112183: MISP: MISP contains a CSS injection vulnerability in the remote event preview feature	N/A	4.8 Medium	N/A	Oct 19, 2026
CVE-2026-112102: AXA Group NLP.js: A vulnerability was detected in AXA Group NLP.js 4.27.0	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112101: BlackBeltTechnology pi-agent-dashboard: A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0	4.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112100: n/a DeepPavlov: A vulnerability was determined in DeepPavlov up to 1.7.0	5.5 Medium	2.0 Low	N/A	Oct 19, 2026
CVE-2026-111408: ExpressTech Quiz And Survey Master: Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object…	8.8 High	N/A	N/A	Oct 19, 2026
CVE-2026-111407: Themeum Tutor LMS: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS…	6.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-111406: PT Norther Lights Production MapSVG: Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG…	9.9 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-111398: PT Norther Lights Production MapSVG: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights…	7.7 High	N/A	N/A	Oct 19, 2026
CVE-2026-110898: WPDeveloper Essential Addons for Elementor: Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor…	6.4 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-110887: HivePress: Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote…	9.9 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-110379: Ays Pro Quiz Maker: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz…	7.1 High	N/A	N/A	Oct 19, 2026
CVE-2026-108837: Apache Software Foundation Apache Kylin: Allocation of resources without limits or throttling vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108833: Apache Software Foundation Apache Kylin: Default startup profile miss security settings in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108823: Apache Software Foundation Apache Kylin: Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108780: Apache Software Foundation Apache Kylin: Potential JDBC source configuration validation vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026

Rows per page

251-275 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business