Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
FreeBSD: VID-05aadfcc-55f5-11f1-915c-8974b59277b5 (CVE-2026-46472): gstreamer1 -- multiple vulnerabilities	7.5 High	N/A	N/A	Oct 16, 2026
CVE-2026-46471: n/a: An issue was discovered in GStreamer gst-plugins-good before 1.28.2	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-44977: Countly countly-server: countly-server is the server-side part of Countly, a product analytics solution	9.0 Critical	N/A	N/A	Oct 16, 2026
CVE-2026-42270: Countly countly-server: countly-server is the server-side part of Countly, a product analytics solution	7.5 High	N/A	N/A	Oct 16, 2026
CVE-2026-42269: Countly countly-server: countly-server is the server-side part of Countly, a product analytics solution	8.1 High	N/A	N/A	Oct 16, 2026
CVE-2026-41582: Countly countly-server: countly-server is the server-side part of Countly, a product analytics solution	7.5 High	N/A	N/A	Oct 16, 2026
CVE-2026-26846: n/a: Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute…	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-111581: Red Hat: A flaw was found in libblockdev	3.3 Low	N/A	N/A	Oct 16, 2026
CVE-2026-102941: gomarkdown markdown: The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML	7.5 High	N/A	N/A	Oct 16, 2026
CVE-2026-102923: CodeWithCJ SparkyFitness: SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families	5.4 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-97851: J4Care dcm4chee-arc-light: The storage status-change REST service allows location records still associated with DICOM instances to be changed to…	9.1 Critical	8.8 High	N/A	Oct 16, 2026
CVE-2026-95183: n/a: An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a…	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-95182: n/a: An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via…	10.0 Critical	N/A	N/A	Oct 16, 2026
CVE-2026-88755: n/a: Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a…	7.8 High	N/A	N/A	Oct 16, 2026
CVE-2026-111728: 5rahim Seanime: Seanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper authorization,…	5.4 Medium	5.3 Medium	N/A	Oct 16, 2026
CVE-2026-107777: Thermo Fisher Torrent Suite Software: Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to…	6.5 Medium	7.1 High	N/A	Oct 16, 2026
CVE-2026-107621: J4Care dcm4chee-arc-light: JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.	7.5 High	8.7 High	N/A	Oct 16, 2026
CVE-2026-106705: n/a: ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module	8.8 High	N/A	N/A	Oct 16, 2026
CVE-2026-105667: J4Care dcm4chee-arc-light: In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the…	7.5 High	8.7 High	N/A	Oct 16, 2026
CVE-2026-105279: J4Care dcm4chee-arc-light: In the default configuration, the archive accepts DICOM associations from an unregistered calling AE	9.1 Critical	9.3 Critical	N/A	Oct 16, 2026
CVE-2026-105273: J4Care dcm4chee-arc-light: MP4Parser does not adequately validate MP4 box sizes	7.5 High	8.7 High	N/A	Oct 16, 2026
CVE-2026-101021: J4Care dcm4chee-arc-light: MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying	7.5 High	8.7 High	N/A	Oct 16, 2026
CVE-2025-52097: n/a: Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary…	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-97858: Guangzhou Juan IoT Technology Co., Ltd.: An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting…	5.3 Medium	6.9 Medium	N/A	Oct 16, 2026
CVE-2026-97470: themefic: The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored…	6.4 Medium	N/A	N/A	Oct 16, 2026

Rows per page

326-350 of 506954

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business