Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-98443: Linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98442: Linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix helper UAF due to extensions…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98441: Linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: avoid modifying shared…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98440: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98439: Linux: In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98438: Linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98437: Linux: In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98436: Linux: In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98435: Linux: In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98434: Linux: In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-98433: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-111991: WongKinYiu yolov9: A security vulnerability has been detected in WongKinYiu yolov9 0.1	6.3 Medium	2.1 Low	N/A	Oct 18, 2026
CVE-2026-111990: kishan0725 Hospital Management System: A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1	7.3 High	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-111988: dyad-sh dyad: A security flaw has been discovered in dyad-sh dyad up to 1.16.0	4.3 Medium	5.3 Medium	N/A	Oct 18, 2026
CVE-2026-110024: @fastify/jwt: @fastify/jwt is a JWT utility plugin for Fastify	6.8 Medium	N/A	N/A	Oct 18, 2026
CVE-2026-111987: AUTOMATIC1111 stable-diffusion-webui: A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1	4.3 Medium	2.1 Low	N/A	Oct 18, 2026
CVE-2026-112063: strophe libstrophe: libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP…	5.9 Medium	6.0 Medium	N/A	Oct 18, 2026
CVE-2026-112062: lwIP: lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent…	5.9 Medium	6.0 Medium	N/A	Oct 18, 2026
CVE-2026-112061: RTMPDump librtmp: librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0…	4.3 Medium	5.3 Medium	N/A	Oct 18, 2026
CVE-2026-112060: RTMPDump librtmp: librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because…	6.4 Medium	6.1 Medium	N/A	Oct 18, 2026
CVE-2026-112059: libLAS: libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating…	6.1 Medium	6.9 Medium	N/A	Oct 18, 2026
CVE-2026-112058: VideoLAN libdvdnav: VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash…	5.5 Medium	6.8 Medium	N/A	Oct 18, 2026
CVE-2026-112057: VideoLAN libdvdnav: libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows…	5.5 Medium	6.8 Medium	N/A	Oct 18, 2026
CVE-2026-112056: wvWare wv: wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows…	5.5 Medium	6.8 Medium	N/A	Oct 18, 2026
CVE-2026-112055: wvWare wv: wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP…	5.5 Medium	6.8 Medium	N/A	Oct 18, 2026

Rows per page

451-475 of 406803

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business