Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-112101: BlackBeltTechnology pi-agent-dashboard: A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0	4.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112100: n/a DeepPavlov: A vulnerability was determined in DeepPavlov up to 1.7.0	5.5 Medium	2.0 Low	N/A	Oct 19, 2026
CVE-2026-111408: ExpressTech Quiz And Survey Master: Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object…	8.8 High	N/A	N/A	Oct 19, 2026
CVE-2026-111407: Themeum Tutor LMS: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS…	6.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-111406: PT Norther Lights Production MapSVG: Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG…	9.9 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-111398: PT Norther Lights Production MapSVG: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights…	7.7 High	N/A	N/A	Oct 19, 2026
CVE-2026-110898: WPDeveloper Essential Addons for Elementor: Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor…	6.4 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-110887: HivePress: Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote…	9.9 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-110379: Ays Pro Quiz Maker: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz…	7.1 High	N/A	N/A	Oct 19, 2026
CVE-2026-108837: Apache Software Foundation Apache Kylin: Allocation of resources without limits or throttling vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108833: Apache Software Foundation Apache Kylin: Default startup profile miss security settings in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108823: Apache Software Foundation Apache Kylin: Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108780: Apache Software Foundation Apache Kylin: Potential JDBC source configuration validation vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108776: Apache Software Foundation Apache Kylin: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108771: Apache Software Foundation Apache Kylin: Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108766: Apache Software Foundation Apache Kylin: Missing authorization on jdbc source config update in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108764: Apache Software Foundation Apache Kylin: Server-Side request forgery (SSRF) vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108762: Apache Software Foundation Apache Kylin: Path-confinement bypass during metadata backup deletion in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-13695: Integratec: SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects…	N/A	8.8 High	N/A	Oct 19, 2026
CVE-2026-112180: MISP: MISP contains a data integrity flaw in its event deletion logic	N/A	5.1 Medium	N/A	Oct 19, 2026
CVE-2026-112179: MISP: In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push	N/A	5.3 Medium	N/A	Oct 19, 2026
CVE-2026-112178: MISP: MISP contains an access control flaw in the proposal (shadow attribute) visibility logic	N/A	7.1 High	N/A	Oct 19, 2026
CVE-2026-112161: Mobatek MobaXterm: MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity	N/A	8.5 High	N/A	Oct 19, 2026
CVE-2026-112098: n/a DeepPavlov: A security flaw has been discovered in DeepPavlov up to 1.7.0	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112097: SourceCodester Inventory System: A vulnerability was found in SourceCodester Inventory System 1.0	3.5 Low	5.1 Medium	N/A	Oct 19, 2026

Rows per page

326-350 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business