Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-86914: Apple macOS: An information disclosure issue was addressed with improved state management	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86913: Apple: A use after free issue was addressed with improved memory management	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86907: Apple macOS: An authorization issue was addressed with improved entitlement checks	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86875: Apple Xcode: An input validation issue was addressed with improved input validation	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86874: Apple Xcode: An out-of-bounds read was addressed with improved input validation	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86872: Apple: A logic issue was addressed with improved state management	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86871: Apple macOS: An integer underflow was addressed with improved input validation	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86868: Apple macOS: An authentication issue was addressed with improved state management	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-84613: Apple: An out-of-bounds write issue was addressed with improved bounds checking	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-84582: Apple: A privacy issue was addressed with improved access restrictions	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-84579: Apple macOS: A logic issue was addressed with improved checks	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-84547: Apple macOS: A memory corruption issue was addressed with improved input validation	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-84508: Apple: This issue was addressed with improved validation of the caller's access	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-84490: Apple iOS and iPadOS: This issue was addressed through improved state management	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-77938: letta-ai letta: Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server…	6.5 Medium	7.1 High	N/A	Oct 20, 2026
CVE-2026-77937: letta-ai letta: Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users…	8.1 High	8.6 High	N/A	Oct 20, 2026
CVE-2026-77936: letta-ai letta: Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never…	9.8 Critical	9.3 Critical	N/A	Oct 20, 2026
CVE-2026-77935: coze-dev coze-studio: Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows…	8.3 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-77934: coze-dev coze-studio: Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands…	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-77933: eosphoros-ai DB-GPT: DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a…	9.8 Critical	9.3 Critical	N/A	Oct 20, 2026
CVE-2026-77932: eosphoros-ai DB-GPT: DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the…	9.8 Critical	9.3 Critical	N/A	Oct 20, 2026
CVE-2026-77930: EvoScientist: EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell…	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-77926: apconw Aix-DB: Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating…	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-75128: chatchat-space Langchain-Chatchat: Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name…	9.8 Critical	9.3 Critical	N/A	Oct 20, 2026
CVE-2026-65396: Apple macOS: A buffer overflow was addressed with improved size validation	N/A	N/A	N/A	Oct 20, 2026

Rows per page

26-50 of 407665

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business