Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-120348: dayrui XunRuiCMS: A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4	7.3 High	5.5 Medium	N/A	Nov 2, 2026
CVE-2026-120347: dayrui XunRuiCMS: A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4	7.3 High	5.5 Medium	N/A	Nov 2, 2026
CVE-2026-120345: WAVLINK WN551X3-A: A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965	10.0 Critical	9.3 Critical	N/A	Nov 2, 2026
CVE-2025-11969: WSO2: The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to…	9.4 Critical	N/A	N/A	Nov 2, 2026
CVE-2024-5617: WSO2: The account lock feature fails to correctly enforce account lockouts on the primary user store when users with…	4.8 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-120344: WAVLINK WN551X3-A: A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965	10.0 Critical	9.3 Critical	N/A	Nov 2, 2026
CVE-2026-120343: mathurvishal CloudClassroom-PHP-Project: A flaw has been found in mathurvishal CloudClassroom-PHP-Project	4.3 Medium	2.1 Low	N/A	Nov 2, 2026
CVE-2026-120342: mathurvishal CloudClassroom-PHP-Project: A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project	7.3 High	5.5 Medium	N/A	Nov 2, 2026
CVE-2026-120341: mathurvishal CloudClassroom-PHP-Project: A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project	7.3 High	5.5 Medium	N/A	Nov 2, 2026
CVE-2026-120340: mathurvishal CloudClassroom-PHP-Project: A weakness has been identified in mathurvishal CloudClassroom-PHP-Project	3.7 Low	2.9 Low	N/A	Nov 2, 2026
CVE-2026-120339: mathurvishal CloudClassroom-PHP-Project: A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project	4.3 Medium	2.1 Low	N/A	Nov 2, 2026
CVE-2026-120337: VStarcam O-KAM SuperIPCam: A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32	7.3 High	5.5 Medium	N/A	Nov 2, 2026
CVE-2026-120336: VStarcam O-KAM Client: A vulnerability was found in VStarcam O-KAM Client 1.3.3.32	7.3 High	5.5 Medium	N/A	Nov 2, 2026
CVE-2026-68591: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible escalation of privilege due to a permissions bypass	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-68590: MediaTek, Inc. MediaTek chipset: In ip_stack, there is a possible out of bounds read due to improper input validation	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-68589: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-68588: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20600: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible application crash due to a logic error	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20599: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible escalation of privilege due to a missing permission check	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20598: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to an integer overflow	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20597: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to a missing bounds check	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20596: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to improper input validation	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20595: MediaTek, Inc. MediaTek chipset: In neuropilot, there is a possible out of bounds write due to a missing bounds check	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20594: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to a missing bounds check	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20593: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible application crash due to improper input validation	5.3 Medium	N/A	N/A	Nov 2, 2026

25 rows per page

376-400 of 574114

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business