Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-91239: Missing Authentication for Critical Function	8.8 High	N/A	0%	Oct 20, 2026
CVE-2026-91238: Uncontrolled Resource Consumption	7.1 High	N/A	0%	Oct 20, 2026
CVE-2026-91237: Improper Access Control	7.5 High	N/A	0%	Oct 20, 2026
CVE-2026-91236: Improper Authentication	9.8 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91235: Improper Authentication	9.8 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91234: Improper Authentication	9.8 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91233: Improper Authentication	9.8 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91232: Improper Access Control	9.9 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91231: Missing Authentication for Critical Function	10.0 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91230: Improper Access Control	9.3 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91229: Improper Access Control	7.5 High	N/A	0%	Oct 20, 2026
CVE-2026-91228: Improper Access Control	7.1 High	N/A	0%	Oct 20, 2026
CVE-2026-91227: Improper Access Control	7.5 High	N/A	0%	Oct 20, 2026
CVE-2026-91226: Improper Access Control	7.5 High	N/A	0%	Oct 20, 2026
CVE-2026-91225: Improper Access Control	9.1 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91224: Improper Access Control	9.9 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91223: Improper Access Control	8.8 High	N/A	0%	Oct 20, 2026
CVE-2026-91222: Improper Authentication	9.9 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91221: Improper Access Control	10.0 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91220: Improper Authentication	9.8 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91219: Exposure of Sensitive Information to an Unauthorized Actor	8.6 High	N/A	0%	Oct 20, 2026
CVE-2026-91218: Improper Access Control	9.6 Critical	N/A	0%	Oct 20, 2026
CVE-2026-91217: Exposure of Sensitive Information to an Unauthorized Actor	8.6 High	N/A	0%	Oct 20, 2026
CVE-2026-91216: Improper Access Control	10.0 Critical	N/A	1%	Oct 20, 2026
CVE-2026-91215: Improper Access Control	8.8 High	N/A	0%	Oct 20, 2026

25 rows per page

376-400 of 13403

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business