Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-101296: Apache Software Foundation Apache Tomcat: A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a…	N/A	9.1 Critical	N/A	Oct 20, 2026
CVE-2026-34485: Nokia Nokia 1830 Global Express (GX): Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-34484: Nokia Nokia 1830 Global Express (GX): Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113620: Eclipse Foundation Eclipse ioFog: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not…	9.8 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-113619: Eclipse Foundation Eclipse ioFog: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template…	7.5 High	N/A	N/A	Oct 20, 2026
CVE-2026-113470: Mozilla: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed…	5.4 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113401: Mozilla: Denial-of-service in the PDF Viewer component	6.5 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113400: Mozilla: Uninitialized memory in the Audio/Video: cubeb component	5.4 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113399: Mozilla: Incorrect boundary conditions in the SVG component	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113392: DrayTek Vigor2960: A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113391: DrayTek Vigor2960: A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218	9.9 Critical	8.6 High	N/A	Oct 20, 2026
CVE-2026-113390: DrayTek Vigor2960: A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218	9.9 Critical	8.6 High	N/A	Oct 20, 2026
CVE-2026-105941: Red Hat streams for Apache Kafka 3: The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes…	8.1 High	N/A	N/A	Oct 20, 2026
CVE-2026-18205: Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax…	6.1 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-14933: Unblu inc. Unblu Spark: Cross-site scripting in the embedded co-browsing feature in Unblu inc	N/A	8.6 High	N/A	Oct 20, 2026
CVE-2026-113583: cypht-org cypht: Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers…	6.1 Medium	5.3 Medium	N/A	Oct 20, 2026
CVE-2026-113496: Red Hat: A flaw was found in cockpit-machines	5.0 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113495: Red Hat: A flaw was found in cockpit-machines	5.0 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113389: DrayTek Vigor2960: A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218	9.9 Critical	8.6 High	N/A	Oct 20, 2026
CVE-2026-113388: n/a opensource-socialnetwork: A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1	4.3 Medium	1.9 Low	N/A	Oct 20, 2026
CVE-2026-113385: LeeDrOiD Labs Shortcutter 2 App: A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android	5.3 Medium	1.9 Low	N/A	Oct 20, 2026
CVE-2026-105949: Red Hat: Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all…	8.8 High	N/A	N/A	Oct 20, 2026
CVE-2026-105312: Red Hat: A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an…	9.9 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-105311: Red Hat: The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console…	7.7 High	N/A	N/A	Oct 20, 2026
CVE-2026-9589: Unblu inc. Unblu Spark: Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc	N/A	9.3 Critical	N/A	Oct 20, 2026

Rows per page

276-300 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business