Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-94272: Unknown Snap Finance: The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-94231: Unknown TrueBooker: The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality,…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-94230: Unknown TrueBooker: The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-94229: Unknown TrueBooker: The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-94228: Unknown TrueBooker: The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-91831: Unknown Subscribe to Comments: The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification…	3.8 Low	N/A	N/A	Oct 19, 2026
CVE-2026-86791: Unknown iPOSpays Payment Gateway for WooCommerce: The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-76740: Hewlett Packard Enterprise: A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280…	7.2 High	N/A	N/A	Oct 19, 2026
CVE-2026-74922: Unknown Document Gallery: The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-74921: Unknown Document Gallery: The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes…	6.8 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-16460: Red Hat: A flaw was found in bootc and ostree	7.4 High	N/A	N/A	Oct 19, 2026
CVE-2026-112089: Dav-ee dairy-management-system: A security vulnerability has been detected in Dav-ee dairy-management-system…	4.7 Medium	2.0 Low	N/A	Oct 19, 2026
CVE-2026-112088: Dav-ee dairy-management-system: A weakness has been identified in Dav-ee dairy-management-system…	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112087: itsourcecode Online Cake Ordering System: A weakness has been identified in itsourcecode Online Cake Ordering System 1.0	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-110034: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a…	3.7 Low	N/A	N/A	Oct 19, 2026
CVE-2026-106010: Unknown BDM Digital Payment Gateway: The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-103311: Unknown Coinbase Commerce Payment Gateway for WooCommerce: The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-94273: Unknown Snap Finance: The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-91047: Unknown ElementsReady Addons for Elementor: The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-91046: Unknown ElementsReady Addons for Elementor: The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt…	4.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-89286: Unknown FormFlow for GoHighLevel (GHL): The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-76739: Hewlett Packard Enterprise: A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server…	4.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-16487: Red Hat: A flaw was found in bootc when operating with the default containers signature policy	8.1 High	N/A	N/A	Oct 19, 2026
CVE-2026-112086: n/a ESPnet: A vulnerability was found in ESPnet up to 202610.post2	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112083: sgl-project SGLang: A security flaw has been discovered in sgl-project SGLang up to 0.5.19	5.3 Medium	5.5 Medium	N/A	Oct 19, 2026

Rows per page

301-325 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business