Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-99262: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/timeout: don't lose a cancel as io-wq arms…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99261: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99260: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99259: Linux: In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix uninitialised clock rate For…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99258: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Avoid using per-cpu output page in…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99257: Linux: In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99256: Linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99255: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't hide a link from…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99254: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring: don't flood a cancelling task with…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99253: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/cancel: rearm local work wake up before…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99252: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/mpscq: disable preemption while pushing A…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99251: Linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Avoid infinite retry loop in…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99250: Linux: In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There have been…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99249: Linux: In the Linux kernel, the following vulnerability has been resolved: pid_namespace: make zap_pid_ns_processes()…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99248: Linux: In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99247: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work if tracing…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99246: Linux: In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with node lock…	8.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-99245: Linux: In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99244: Linux: In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL from…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-99243: Linux: In the Linux kernel, the following vulnerability has been resolved: io-wq: order the exit bit against worker creation…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-114442: Apache Software Foundation Apache HertzBeat: Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP…	N/A	N/A	N/A	Nov 3, 2026
CVE-2026-89229: vivo BlueLM Copilot: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM…	N/A	5.1 Medium	N/A	Nov 3, 2026
CVE-2026-77778: Zohocorp ManageEngine Key Manager Plus: ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging…	7.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-77691: Zohocorp ManageEngine Key Manager Plus: ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when…	8.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-120333: TYPO3 Extension "Frontend User Registration": The actions linked in the emails of the extension (e.g	N/A	8.8 High	N/A	Nov 3, 2026

25 rows per page

351-375 of 528356

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business