Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-107686: Gitea: The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-107618: Gitea: `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection,…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-105964: Gitea: The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-105661: Gitea: Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-104627: Gitea: The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without…	N/A	N/A	N/A	Oct 18, 2026
CVE-2024-4457: WSO2: The Management Console fails to properly validate input related to the configuration of JDBC user stores	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-111992: itsmeravitejak Online-Examination-System: A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449	6.3 Medium	2.1 Low	N/A	Oct 18, 2026
CVE-2026-111993: Soarkey StudentManagement: A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e	3.3 Low	1.9 Low	N/A	Oct 18, 2026
CVE-2026-98868: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98867: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98866: Linux: In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98865: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't run ops.dequeue() with a DSQ lock…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98864: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98863: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98862: Linux: In the Linux kernel, the following vulnerability has been resolved: audit: fix exe mark UAF in kill_rules()…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98861: Linux: In the Linux kernel, the following vulnerability has been resolved: fprobe: Use guard(rcu_sched_notrace) and check…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98860: Linux: In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t when checking…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98859: Linux: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98858: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring: fix task_work add use-after-free with…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98857: Linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98856: Linux: In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98855: Linux: In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98854: Linux: In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98853: Linux: In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98852: Linux: In the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detection of tunneled…	N/A	N/A	N/A	Oct 18, 2026

Rows per page

251-275 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business