Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-112863: Hogash KALLYAS: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hogash KALLYAS…	7.1 High	N/A	N/A	Oct 23, 2026
CVE-2026-112859: ThemeREX Group Little Birdies: Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112858: axiomthemes Rhodos: Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112857: axiomthemes Reprizo: Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112856: ThemeREX Group Vagabonds: Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112855: axiomthemes Redy: Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112854: axiomthemes Holistic Center: Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112853: axiomthemes Hallelujah: Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112852: ThemeREX Group Helion: Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue…	8.1 High	N/A	N/A	Oct 23, 2026
CVE-2026-112851: ThemeREX Group HotLock: Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112850: AncoraThemes Your Dress: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability…	8.1 High	N/A	N/A	Oct 23, 2026
CVE-2026-112849: AivahThemes Hostme v2: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes…	7.1 High	N/A	N/A	Oct 23, 2026
CVE-2026-112848: AivahThemes Hostme v2: Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112847: ThemeREX ZenSoul: Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112846: ThemeREX Group Save Life: Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-98916: Linux: In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98915: Linux: In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98914: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98913: Linux: In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98912: Linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98911: Linux: In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98910: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98909: Linux: In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: unregister devlink on port…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98908: Linux: In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-98907: Linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate…	N/A	N/A	N/A	Oct 23, 2026

Rows per page

301-325 of 413321

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business