Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-92287: Apache Software Foundation: Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-43848: Advantech ADAM-3600: A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the…	N/A	6.9 Medium	N/A	Oct 20, 2026
CVE-2026-43847: Advantech ADAM-3600: A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without…	N/A	8.2 High	N/A	Oct 20, 2026
CVE-2026-43846: Advantech ADAM-3600: A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to…	N/A	8.6 High	N/A	Oct 20, 2026
CVE-2026-43845: Advantech ADAM-3600: A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.	N/A	9.2 Critical	N/A	Oct 20, 2026
CVE-2026-43844: Advantech ADAM-3600: A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.	N/A	9.3 Critical	N/A	Oct 20, 2026
CVE-2026-43843: Advantech ADAM-3600: An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the…	N/A	6.9 Medium	N/A	Oct 20, 2026
CVE-2026-43842: Advantech ADAM-3600: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to…	N/A	6.9 Medium	N/A	Oct 20, 2026
CVE-2026-43841: Advantech ADAM-3600: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to…	N/A	6.9 Medium	N/A	Oct 20, 2026
CVE-2026-43840: Advantech ADAM-3600: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to…	N/A	6.9 Medium	N/A	Oct 20, 2026
CVE-2026-43839: Advantech ADAM-3600: A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker…	N/A	8.7 High	N/A	Oct 20, 2026
CVE-2026-43838: Advantech ADAM-3600: A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code…	N/A	9.2 Critical	N/A	Oct 20, 2026
CVE-2026-43837: Advantech ADAM-3600: A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest…	N/A	7.5 High	N/A	Oct 20, 2026
CVE-2026-43836: Advantech ADAM-3600: A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.	N/A	9.3 Critical	N/A	Oct 20, 2026
CVE-2026-11960: FacturaScripts: Enumeration of unauthenticated users in FacturaScripts, version 2025.61	N/A	6.9 Medium	N/A	Oct 20, 2026
CVE-2026-11959: FacturaScripts: Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or…	N/A	6.9 Medium	N/A	Oct 20, 2026
CVE-2026-113469: Stormshield Stormshield Network Security: A failure has been identified in the SNS during dynamic data files signature check	7.5 High	N/A	N/A	Oct 20, 2026
CVE-2026-113465: Stormshield Stormshield Network Security: It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel	6.6 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-101201: qt: A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of…	N/A	4.3 Medium	N/A	Oct 20, 2026
CVE-2026-43835: Advantech ADAM-3600: A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware…	N/A	8.6 High	N/A	Oct 20, 2026
CVE-2026-43834: Advantech ADAM-3600: A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to…	N/A	7.5 High	N/A	Oct 20, 2026
CVE-2026-113407: YS-infoware BA-Workflow: BA-Workflow developed by YS-infoware has a SQL Injection vulnerability	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-113406: YS-infoware BA-Workflow: BA-Workflow developed by YS-infoware has a SQL Injection vulnerability	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-113405: YS-infoware BA-Workflow: BA-Workflow developed by YS-infoware has a SQL Injection vulnerability	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-112177: Red Hat: A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8	7.3 High	N/A	N/A	Oct 20, 2026

Rows per page

276-300 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business