Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-53976: Improper Limitation of a Pathname to a Restricted Directory	9.1 Critical	9.3 Critical	3%	Aug 6, 2026
CVE-2026-19039: Improper Neutralization of Special Elements used in a Command	5.3 Medium	1.9 Low	1%	Aug 6, 2026
CVE-2026-71312: Improper Neutralization of Special Elements used in an OS Command	8.0 High	N/A	0%	Aug 5, 2026
CVE-2026-71310: Uncontrolled Resource Consumption	5.9 Medium	N/A	1%	Aug 5, 2026
CVE-2026-70615: Improper Neutralization of CRLF Sequences	9.9 Critical	8.5 High	0%	Aug 5, 2026
CVE-2026-61891: Improper Limitation of a Pathname to a Restricted Directory	7.5 High	N/A	1%	Aug 5, 2026
CVE-2026-71243: Improper Neutralization of Special Elements used in an OS Command	8.8 High	N/A	1%	Aug 5, 2026
CVE-2026-48113: Incorrect Authorization	N/A	8.5 High	0%	Aug 3, 2026
CVE-2026-18654: Key Exchange without Entity Authentication	6.8 Medium	6.9 Medium	0%	Aug 3, 2026
CVE-2026-68930: Operation on Resource in Wrong Phase of Lifetime	6.5 Medium	N/A	0%	Aug 3, 2026
CVE-2026-69097: Improper Neutralization of Special Elements in Output Used by a Downstream Component	7.3 High	7.3 High	0%	Aug 3, 2026
CVE-2026-18582: Free of Memory not on the Heap	5.3 Medium	5.5 Medium	1%	Aug 3, 2026
CVE-2026-62663: Improper Limitation of a Pathname to a Restricted Directory	7.5 High	N/A	0%	Jul 30, 2026
CVE-2026-56428: Incorrect User Management	8.1 High	N/A	0%	Jul 30, 2026
CVE-2026-44105: Insertion of Sensitive Information into Log File	6.6 Medium	5.8 Medium	0%	Jul 30, 2026
CVE-2026-44094: Not Failing Securely	8.6 High	8.3 High	0%	Jul 30, 2026
CVE-2026-67192: Stack-based Buffer Overflow	8.1 High	9.2 Critical	1%	Jul 29, 2026
CVE-2026-67191: Heap-based Buffer Overflow	9.8 Critical	9.3 Critical	1%	Jul 29, 2026
CVE-2026-54635: Improper Authentication	7.5 High	N/A	1%	Jul 28, 2026
CVE-2026-14837: Improper Verification of Cryptographic Signature	7.8 High	8.5 High	0%	Jul 27, 2026
CVE-2026-66035: Heap-based Buffer Overflow	7.5 High	7.7 High	0%	Jul 24, 2026
CVE-2026-66034: Out-of-bounds Read	7.5 High	7.7 High	0%	Jul 24, 2026
CVE-2026-66033: Integer Underflow (Wrap or Wraparound)	7.5 High	8.7 High	1%	Jul 24, 2026
CVE-2026-66032: Double Free	8.8 High	8.7 High	0%	Jul 24, 2026
CVE-2026-65698: Improper Limitation of a Pathname to a Restricted Directory	5.3 Medium	6.0 Medium	0%	Jul 23, 2026

25 rows per page

301-325 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report