Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-109935: Unknown Otter Blocks: The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a published post…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-109934: Unknown Otter Blocks: The Otter Blocks WordPress plugin before 3.2.8 does not correctly determine whether a post is publicly readable before…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-109933: Unknown Otter Blocks: The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-107858: Google Agent Development Kit (ADK) for Java: Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942)…	N/A	7.2 High	N/A	Oct 23, 2026
CVE-2026-109198: cleantalk CleanTalk Anti-Spam – Complete Spam Protection: The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site…	7.2 High	N/A	N/A	Oct 23, 2026
CVE-2026-115497: codepeople Music Store – WordPress eCommerce: The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to,…	7.5 High	N/A	N/A	Oct 23, 2026
CVE-2026-55835: lookyloo: Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call…	N/A	6.9 Medium	N/A	Oct 23, 2026
CVE-2026-86055: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	N/A	8.7 High	N/A	Oct 23, 2026
CVE-2026-86020: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	4.6 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-86019: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	N/A	5.3 Medium	N/A	Oct 23, 2026
CVE-2026-86018: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	N/A	5.3 Medium	N/A	Oct 23, 2026
CVE-2026-59188: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	5.4 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-55600: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	N/A	5.7 Medium	N/A	Oct 23, 2026
CVE-2026-54631: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	6.3 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-90458: OpenStack Ironic: OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's…	5.4 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-54630: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	9.6 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-54615: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components	N/A	6.0 Medium	N/A	Oct 23, 2026
CVE-2026-89419: OpenStack Ironic: OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to…	5.0 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-115638: OpenStack Ironic: OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of…	4.3 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-115547: Okta Okta Access Gateway: An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted…	9.1 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-115546: Okta Okta Access Gateway: Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on	8.1 High	N/A	N/A	Oct 23, 2026
CVE-2026-115537: gedelumbung HospitalManagement: A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8	4.3 Medium	5.3 Medium	N/A	Oct 23, 2026
CVE-2026-19678: onPhase onPhase Forms: A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase…	N/A	8.7 High	N/A	Oct 23, 2026
CVE-2026-19677: onPhase onPhase Forms: An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an…	N/A	9.3 Critical	N/A	Oct 23, 2026
CVE-2026-115536: gedelumbung HospitalManagement: A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8	4.3 Medium	5.3 Medium	N/A	Oct 23, 2026

Rows per page

26-50 of 412662

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business