Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-45405: Improper Link Resolution Before File Access	8.8 High	N/A	0%	Jun 26, 2026
CVE-2026-50014: Improper Neutralization of Argument Delimiters in a Command	7.3 High	N/A	0%	Jun 25, 2026
CVE-2026-52814: Uncontrolled Resource Consumption	N/A	5.5 Medium	1%	Jun 24, 2026
CVE-2026-52811: Improper Limitation of a Pathname to a Restricted Directory	N/A	9.0 Critical	0%	Jun 24, 2026
CVE-2026-31978: Improper Limitation of a Pathname to a Restricted Directory	6.5 Medium	N/A	0%	Jun 24, 2026
CVE-2026-54686: Improper Neutralization of Special Elements used in an OS Command	4.3 Medium	N/A	0%	Jun 24, 2026
CVE-2026-48732: Improper Neutralization of Special Elements used in an OS Command	8.8 High	N/A	1%	Jun 24, 2026
CVE-2026-44017: Improper Limitation of a Pathname to a Restricted Directory	7.5 High	N/A	1%	Jun 24, 2026
CVE-2026-57282: Improper Neutralization of Special Elements used in an OS Command	5.0 Medium	N/A	0%	Jun 24, 2026
CVE-2026-11807: Missing Authorization	9.6 Critical	N/A	1%	Jun 23, 2026
CVE-2026-11819: Insertion of Sensitive Information into Log File	5.5 Medium	N/A	0%	Jun 23, 2026
CVE-2026-56301: Incorrect Default Permissions	5.5 Medium	6.8 Medium	0%	Jun 23, 2026
CVE-2026-55654: Out-of-bounds Read	3.7 Low	N/A	1%	Jun 23, 2026
CVE-2026-55655: Improper Restriction of Communication Channel to Intended Endpoints	5.0 Medium	N/A	0%	Jun 23, 2026
CVE-2026-55653: Double Free	4.3 Medium	N/A	1%	Jun 23, 2026
CVE-2026-54100: Improper Certificate Validation	8.3 High	N/A	0%	Jun 22, 2026
CVE-2026-11745: Undefined Security Weakness	N/A	8.8 High	0%	Jun 22, 2026
CVE-2025-15661: Out-of-bounds Read	6.5 Medium	8.3 High	1%	Jun 18, 2026
CVE-2026-48716: Improper Limitation of a Pathname to a Restricted Directory	8.7 High	N/A	0%	Jun 18, 2026
CVE-2026-48986: Loop with Unreachable Exit Condition	4.7 Medium	N/A	0%	Jun 18, 2026
CVE-2026-55201: Improper Limitation of a Pathname to a Restricted Directory	6.8 Medium	7.4 High	0%	Jun 17, 2026
CVE-2026-55199: Loop with Unreachable Exit Condition	7.5 High	8.2 High	1%	Jun 17, 2026
CVE-2026-55200: Integer Overflow to Buffer Overflow	8.1 High	9.2 Critical	4%	Jun 17, 2026
CVE-2026-48797: Improperly Implemented Security Check for Standard	N/A	9.3 Critical	0%	Jun 17, 2026
CVE-2026-46864: Undefined Security Weakness	8.8 High	N/A	0%	Jun 17, 2026

25 rows per page

401-425 of 2135

‹›

MDR Buyer's Guide

Global Threat Landscape Report