Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-61649: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application	7.7 High	N/A	N/A	Nov 5, 2026
CVE-2026-63215: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application	8.3 High	N/A	N/A	Nov 5, 2026
CVE-2026-116472: Kubernetes, SUSE: A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause…	2.7 Low	N/A	N/A	Nov 5, 2026
CVE-2026-63217: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application	6.5 Medium	N/A	N/A	Nov 5, 2026
CVE-2026-94395: Thalesgroup Safenet Authentication Client SIS token engine: A stack-based buffer overflow in Thales SafeNet Authentication Client (SAC) SIS token engine processing can be…	N/A	7.0 High	N/A	Nov 5, 2026
CVE-2026-63214: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application	8.8 High	N/A	N/A	Nov 5, 2026
CVE-2026-63218: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application	6.5 Medium	N/A	N/A	Nov 5, 2026
CVE-2026-61651: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application	8.3 High	N/A	N/A	Nov 5, 2026
CVE-2026-63111: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application	N/A	7.1 High	N/A	Nov 5, 2026
CVE-2026-115451: tassos.gr: Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension…	N/A	6.9 Medium	N/A	Nov 5, 2026
CVE-2026-118494: jreviews.com JReviews component for Joomla: Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 -…	N/A	8.2 High	N/A	Nov 5, 2026
CVE-2026-107129: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0	N/A	8.3 High	N/A	Nov 5, 2026
CVE-2026-107130: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0	N/A	6.9 Medium	N/A	Nov 5, 2026
CVE-2026-107903: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0	N/A	8.6 High	N/A	Nov 5, 2026
CVE-2026-105607: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox…	N/A	8.6 High	N/A	Nov 5, 2026
CVE-2026-115452: tassos.gr: Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack…	N/A	7.5 High	N/A	Nov 5, 2026
CVE-2026-121949: sensiolabs symfony: The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes,…	N/A	2.3 Low	N/A	Nov 5, 2026
CVE-2026-123184: Altium Altium 365: An incorrect authorization vulnerability exists in the Altium 365 Git Service	N/A	7.2 High	N/A	Nov 5, 2026
CVE-2026-107359: Silicon Labs WF200 FW: Improper input validation in the beacon handler for WF200 firmware versions 3.17.0 and earlier may result in a…	N/A	7.1 High	N/A	Nov 5, 2026
CVE-2026-112110: Thalesgroup Safenet Authentication Client Service: A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function…	N/A	5.8 Medium	N/A	Nov 5, 2026
CVE-2026-102927: hedgedoc: HedgeDoc is an open source, real-time collaborative markdown notes application	N/A	5.9 Medium	N/A	Nov 5, 2026
CVE-2026-54912: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime	N/A	8.8 High	N/A	Nov 5, 2026
CVE-2026-54913: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime	N/A	6.9 Medium	N/A	Nov 5, 2026
CVE-2026-54914: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime	N/A	8.3 High	N/A	Nov 5, 2026
CVE-2026-77439: immich-app immich: Immich is a self-hosted photo and video management solution	8.8 High	N/A	N/A	Nov 5, 2026

25 rows per page

26-50 of 423114

‹›

MDR Buyer's Guide

Global Threat Landscape Report