Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-16283: Osbil Technology Ltd.Osbil Technology Ltd. oPanel: Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Osbil…	8.8 High	N/A	N/A	Nov 9, 2026
CVE-2026-124635: kevquirk PureBlog: A vulnerability was identified in kevquirk PureBlog up to 3.7.2	4.7 Medium	5.1 Medium	N/A	Nov 9, 2026
CVE-2026-124625: n/a PipraPay: A security vulnerability has been detected in PipraPay 3.0.0	6.3 Medium	2.1 Low	N/A	Nov 9, 2026
CVE-2026-124624: n/a PipraPay: A weakness has been identified in PipraPay 3.0.0	5.3 Medium	5.5 Medium	N/A	Nov 9, 2026
CVE-2026-121841: Mozilla Firefox for iOS: Other issue in Firefox for iOS	N/A	N/A	N/A	Nov 9, 2026
CVE-2026-119743: bpampuch pdfmake: pdfmake before 0.3.14 contains a shared resource caching vulnerability that allows attackers to access cross-document…	4.8 Medium	6.3 Medium	N/A	Nov 9, 2026
CVE-2026-119274: Infoblox NIOS: Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSS	4.8 Medium	N/A	N/A	Nov 9, 2026
CVE-2026-19552: Python Software Foundation CPython: When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not…	N/A	0.0 None	N/A	Nov 9, 2026
CVE-2026-124636: kevquirk PureBlog: A security flaw has been discovered in kevquirk PureBlog up to 3.7.2	3.8 Low	5.1 Medium	N/A	Nov 9, 2026
CVE-2026-95779: Hewlett Packard Enterprise (HPE) HPE Morpheus Software: An exposure of the appliance’s confidential certificate information vulnerability exists in HPE Morpheus manager…	8.8 High	N/A	N/A	Nov 9, 2026
CVE-2026-95778: Hewlett Packard Enterprise (HPE) HPE Morpheus Software: A remote code execution vulnerability exists in HPE Morpheus Software.	8.8 High	N/A	N/A	Nov 9, 2026
CVE-2026-121843: Mozilla Firefox for iOS: Privilege escalation in Firefox for iOS	N/A	N/A	N/A	Nov 9, 2026
CVE-2026-121842: Mozilla Firefox for iOS: Privilege escalation in the Reader View component in Firefox for iOS	N/A	N/A	N/A	Nov 9, 2026
CVE-2026-95648: C-Prot Inc. C-Prot AppDefense: Improperly controlled modification of Dynamically-Determined object attributes vulnerability in C-Prot Inc	8.1 High	N/A	N/A	Nov 9, 2026
CVE-2026-124622: olivier-ls PHP-FTS: A vulnerability was identified in olivier-ls PHP-FTS up to 1.1.3	5.3 Medium	4.8 Medium	N/A	Nov 9, 2026
CVE-2026-124079: rConfig: rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability…	9.8 Critical	9.3 Critical	N/A	Nov 9, 2026
CVE-2026-121611: Red Hat: A flaw was found in GStreamer's gst-plugins-bad package	6.5 Medium	N/A	N/A	Nov 9, 2026
CVE-2026-119613: ash-project ash_ai: Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai allows a caller of an…	N/A	5.3 Medium	N/A	Nov 9, 2026
CVE-2026-119610: Red Hat: A flaw was found in GStreamer's gst-plugins-good, specifically in the H.264 RTP depayloader element	8.2 High	N/A	N/A	Nov 9, 2026
CVE-2026-118792: CompuGroup Medical Wingesfar: Default credentials permit access through AcuXDBC.	N/A	6.1 Medium	N/A	Nov 9, 2026
CVE-2026-118791: CompuGroup Medical Wingesfar: The application implements software update functionality without adequate authenticity and integrity validation,…	N/A	7.2 High	N/A	Nov 9, 2026
CVE-2026-118790: CompuGroup Medical Wingesfar: Multiple hardcoded credentials are embedded within product components and administrative functionalities	N/A	7.2 High	N/A	Nov 9, 2026
CVE-2026-112171: GALENO SISTEMI MAGISTRA: An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to,…	N/A	4.4 Medium	N/A	Nov 9, 2026
CVE-2026-112170: GALENO SISTEMI MAGISTRA: The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.	N/A	6.3 Medium	N/A	Nov 9, 2026
CVE-2026-112169: GALENO SISTEMI MAGISTRA: Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a…	N/A	6.1 Medium	N/A	Nov 9, 2026

25 rows per page

276-300 of 427771

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business