Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2025-30051: CGM CGM CLININET: The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials,…	N/A	6.8 Medium	N/A	Oct 23, 2026
CVE-2025-30050: CGM CGM CLININET: CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified…	N/A	9.4 Critical	N/A	Oct 23, 2026
CVE-2025-30049: CGM CGM CLININET: The CGM CLININET application stores user passwords as unsalted MD5 hashes	N/A	8.2 High	N/A	Oct 23, 2026
CVE-2025-30047: CGM CGM CLININET: CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data	N/A	9.4 Critical	N/A	Oct 23, 2026
CVE-2025-30046: CGM CGM CLININET: In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run…	N/A	9.0 Critical	N/A	Oct 23, 2026
CVE-2025-30045: CGM CGM CLININET: CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF…	N/A	8.6 High	N/A	Oct 23, 2026
CVE-2025-30043: CGM CGM CLININET: CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path	N/A	7.1 High	N/A	Oct 23, 2026
CVE-2026-93489: ASUS Router: Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge…	N/A	8.7 High	N/A	Oct 23, 2026
CVE-2026-75779: ASUS Router: Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request…	N/A	8.6 High	N/A	Oct 23, 2026
CVE-2026-75775: ASUS Router: Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute…	N/A	7.7 High	N/A	Oct 23, 2026
CVE-2026-63244: WizLearn Technologies Pte. Ltd. Learning Management System: An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-4952: Cross-site Scripting (XSS)	N/A	5.1 Medium	N/A	Oct 23, 2026
CVE-2026-4951: VertiGIS Ltd. WebOrderSystem (KundenManager): The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for…	N/A	5.1 Medium	N/A	Oct 23, 2026
CVE-2026-4950: VertiGIS Ltd. WebOrderSystem (KundenManager): The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the…	N/A	4.8 Medium	N/A	Oct 23, 2026
CVE-2026-63243: Creative Labs: An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could…	4.3 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-55981: Creative Labs: A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate…	9.6 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-94268: Unknown: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress…	8.1 High	N/A	N/A	Oct 23, 2026
CVE-2026-94267: Unknown: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress…	9.0 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-94264: Unknown: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress…	6.8 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-94262: Unknown: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress…	8.1 High	N/A	N/A	Oct 23, 2026
CVE-2026-113501: Unknown LiteSpeed Cache: The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal…	3.1 Low	N/A	N/A	Oct 23, 2026
CVE-2026-113500: Unknown LiteSpeed Cache: The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet…	7.5 High	N/A	N/A	Oct 23, 2026
CVE-2026-113499: Unknown LiteSpeed Cache: The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to stylesheet…	7.5 High	N/A	N/A	Oct 23, 2026
CVE-2026-113472: Unknown Depicter — Popup & Slider Builder: The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files in its…	5.4 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-112230: Unknown Popup Builder: The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in…	3.7 Low	N/A	N/A	Oct 23, 2026

Rows per page

426-450 of 413321

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business