Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-99268: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring: wake ring pollers for local task_work…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99267: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: make stale entries time out after…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99266: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix buffer offsets in areas above…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99265: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/openclose: keep the lock in…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99264: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't retry recv on uncommitted…	7.8 High	N/A	N/A	Nov 3, 2026
CVE-2026-99263: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: avoid retry wakeup loss when…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99262: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/timeout: don't lose a cancel as io-wq arms…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99255: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't hide a link from…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99254: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring: don't flood a cancelling task with…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99253: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/cancel: rearm local work wake up before…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99252: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/mpscq: disable preemption while pushing A…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99246: Linux: In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with node lock…	8.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-114442: Apache Software Foundation Apache HertzBeat: Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99245: Linux: In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99244: Linux: In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL from…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99243: Linux: In the Linux kernel, the following vulnerability has been resolved: io-wq: order the exit bit against worker creation…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-89293: Eclipse Foundation Eclipse Mnestix: In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…	N/A	8.8 High	N/A	Nov 3, 2026
CVE-2026-89292: Eclipse Foundation Eclipse Mnestix: In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…	N/A	9.2 Critical	N/A	Nov 3, 2026
CVE-2026-89229: vivo BlueLM Copilot: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM…	N/A	5.1 Medium	N/A	Nov 3, 2026
CVE-2026-77778: Zohocorp ManageEngine Key Manager Plus: ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging…	7.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-77777: Zohocorp ManageEngine Key Manager Plus: ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow…	7.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-77691: Zohocorp ManageEngine Key Manager Plus: ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when…	8.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-120333: TYPO3 Extension "Frontend User Registration": The actions linked in the emails of the extension (e.g	N/A	8.8 High	N/A	Nov 3, 2026
CVE-2026-120332: TYPO3 Extension "Mail": The HTML content of mails and tracked URLs are rendered unescaped in the backend module	N/A	5.1 Medium	N/A	Nov 3, 2026
CVE-2026-120331: TYPO3 Extension "Mail": Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the…	N/A	5.3 Medium	N/A	Nov 3, 2026

25 rows per page

276-300 of 528356

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business