Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-119098: lifterlms: The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Stored Cross-Site…	6.4 Medium	N/A	N/A	Nov 7, 2026
CVE-2026-119070: optimole Optimole – Optimize Images \| Convert WebP & AVIF \| CDN & Lazy Load \| Image Optimization: The Optimole – Optimize Images \| Convert WebP & AVIF \| CDN & Lazy Load \| Image Optimization plugin for WordPress is…	7.2 High	N/A	N/A	Nov 7, 2026
CVE-2026-118067: 10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder: The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored…	5.4 Medium	N/A	N/A	Nov 7, 2026
CVE-2026-118054: thimpress LearnPress – Course Review: The LearnPress – Course Review plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the…	6.4 Medium	N/A	N/A	Nov 7, 2026
CVE-2026-118046: rabilal JS Help Desk – AI-Powered Support & Ticketing System: The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to Stored DOM-Based…	6.4 Medium	N/A	N/A	Nov 7, 2026
CVE-2026-116562: stylemix Motors – Car Dealership & Classified Listings Plugin: The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site…	6.4 Medium	N/A	N/A	Nov 7, 2026
CVE-2026-115816: extendthemes Kubio AI Page Builder: The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (review…	6.4 Medium	N/A	N/A	Nov 7, 2026
CVE-2026-104913: esaia Interactive Real Estate – Floor Plan & Building Visualizer: The Interactive Real Estate – Floor Plan & Building Visualizer plugin for WordPress is vulnerable to Arbitrary File…	8.8 High	N/A	N/A	Nov 7, 2026
CVE-2026-71881: GBIF Integrated Publishing Toolkit: Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5…	N/A	4.8 Medium	N/A	Nov 7, 2026
CVE-2026-123471: myCred: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in myCred myCred mycred…	4.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-122670: WP SYNTEX Polylang: Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Exploiting Incorrectly Configured Access…	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-120851: PublishPress PublishPress Revisions: Missing Authorization vulnerability in PublishPress PublishPress Revisions revisionary allows Exploiting Incorrectly…	4.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-120845: WPMU DEV Smush Image Compression and Optimization: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Smush…	6.5 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-119519: WProyal Royal Elementor Addons: Missing Authorization vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting…	4.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-118786: NXP MCUXpresso SDK: Improper input validation in non-secure-callable (NSC) veneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore…	6.8 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-118785: NXP MCUXpresso SDK: Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples…	6.7 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-109469: Microsoft Entra Device Registration: Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to…	10.0 Critical	N/A	N/A	Nov 6, 2026
CVE-2026-107931: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-27356: ibericode MC4WP: Missing Authorization vulnerability in ibericode MC4WP mailchimp-for-wp allows Exploiting Incorrectly Configured Access…	5.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-94619: filegator: FileGator is a multi-user file manager	5.9 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-94618: filegator: FileGator is a multi-user file manager	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-77442: IgnisDa ryot: Ryot is a self-hosted personal tracking application	5.9 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-69128: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…	N/A	4.6 Medium	N/A	Nov 6, 2026
CVE-2026-68935: chartbrew: Chartbrew is an open-source web application for creating charts from databases and APIs	9.1 Critical	N/A	N/A	Nov 6, 2026
CVE-2026-68933: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…	7.5 High	N/A	N/A	Nov 6, 2026

25 rows per page

451-475 of 425038

‹›

MDR Buyer's Guide

Global Threat Landscape Report