Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-96244: Use After Free	7.8 High	N/A	0%	Oct 13, 2026
CVE-2026-96243: Improper Link Resolution Before File Access	7.8 High	N/A	0%	Oct 13, 2026
CVE-2026-96238: Origin Validation Error	6.5 Medium	N/A	0%	Oct 13, 2026
CVE-2026-96237: Inclusion of Functionality from Untrusted Control Sphere	7.5 High	N/A	1%	Oct 13, 2026
CVE-2026-96236: Allocation of Resources Without Limits or Throttling	7.5 High	N/A	1%	Oct 13, 2026
CVE-2026-96235: Out-of-bounds Write	8.8 High	N/A	1%	Oct 13, 2026
CVE-2026-96234: Origin Validation Error	5.3 Medium	N/A	0%	Oct 13, 2026
CVE-2026-96233: Out-of-bounds Write	7.5 High	N/A	1%	Oct 13, 2026
CVE-2026-96232: Out-of-bounds Read	7.5 High	N/A	1%	Oct 13, 2026
CVE-2026-96231: Improper Link Resolution Before File Access	7.8 High	N/A	0%	Oct 13, 2026
CVE-2026-96230: Improper Neutralization of Input During Web Page Generation	8.8 High	N/A	1%	Oct 13, 2026
CVE-2026-96229: Permissive List of Allowed Inputs	6.5 Medium	N/A	1%	Oct 13, 2026
CVE-2026-96225: Improper Link Resolution Before File Access	7.8 High	N/A	0%	Oct 13, 2026
CVE-2026-96224: Out-of-bounds Write	8.8 High	N/A	1%	Oct 13, 2026
CVE-2026-96223: Use After Free	7.8 High	N/A	0%	Oct 13, 2026
CVE-2026-96222: Improper Certificate Validation	7.4 High	N/A	1%	Oct 13, 2026
CVE-2026-96220: Improper Control of Generation of Code	7.8 High	N/A	1%	Oct 13, 2026
CVE-2026-96219: Out-of-bounds Write	9.8 Critical	N/A	1%	Oct 13, 2026
CVE-2026-96218: External Control of System or Configuration Setting	5.5 Medium	N/A	1%	Oct 13, 2026
CVE-2026-96217: Heap-based Buffer Overflow	7.8 High	N/A	0%	Oct 13, 2026
CVE-2026-96216: Use After Free	7.0 High	N/A	0%	Oct 13, 2026
CVE-2026-96215: Concurrent Execution using Shared Resource with Improper Synchronization	7.0 High	N/A	0%	Oct 13, 2026
CVE-2026-96209: Out-of-bounds Read	7.0 High	N/A	0%	Oct 13, 2026
CVE-2026-96206: Use of Uninitialized Resource	5.5 Medium	N/A	0%	Oct 13, 2026
CVE-2026-96204: Server-Side Request Forgery (SSRF)	6.5 Medium	N/A	1%	Oct 13, 2026

25 rows per page

326-350 of 16877

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business