Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-77932: eosphoros-ai DB-GPT: DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the…	9.8 Critical	9.3 Critical	N/A	Oct 20, 2026
CVE-2026-109443: jd-opensource JoySafeter: JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run…	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-105297: Cloudflare https://github.com/cloudflare/pingora: Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its…	7.5 High	N/A	N/A	Oct 20, 2026
CVE-2026-8355: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows…	5.4 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-112373: H3C Magic NX15: A security vulnerability has been detected in H3C Magic NX15 NX15V100R017	6.5 Medium	5.7 Medium	N/A	Oct 20, 2026
CVE-2026-109126: IBM: IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically…	8.8 High	N/A	N/A	Oct 20, 2026
CVE-2026-107400: IBM TRIRIGA Application Platform: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary…	8.8 High	N/A	N/A	Oct 20, 2026
CVE-2026-107366: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification	8.3 High	N/A	N/A	Oct 20, 2026
CVE-2026-105453: IBM Sterling Connect Direct for Unix: IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker…	8.4 High	N/A	N/A	Oct 20, 2026
CVE-2026-19178: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized…	6.8 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-112372: H3C Magic NX15: A weakness has been identified in H3C Magic NX15 V100R017	6.6 Medium	2.0 Low	N/A	Oct 19, 2026
CVE-2026-112371: H3C Magic NX15: A vulnerability was determined in H3C Magic NX15 NX15V100R017	9.9 Critical	8.6 High	N/A	Oct 19, 2026
CVE-2026-112370: H3C Magic NX15: A vulnerability was found in H3C Magic NX15 100R017	9.9 Critical	8.6 High	N/A	Oct 19, 2026
CVE-2025-36252: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not…	6.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2025-36069: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an…	5.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2025-36061: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could…	6.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-77684: zephyrproject zephyr: The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT…	5.7 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-19595: zephyrproject zephyr: The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two…	6.1 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-112991: MISP misp-modules: The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in…	N/A	6.3 Medium	N/A	Oct 19, 2026
CVE-2026-57529: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-57528: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-57526: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-57519: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-57515: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-57514: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 19, 2026

Rows per page

376-400 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business