Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-109369: murgroland WP Booking System – Booking Calendar: The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up…	6.8 Medium	N/A	N/A	Oct 17, 2026
CVE-2026-109368: murgroland WP Booking System – Booking Calendar: The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all…	6.5 Medium	N/A	N/A	Oct 17, 2026
CVE-2026-108123: murgroland WP Booking System – Booking Calendar: The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up…	7.5 High	N/A	N/A	Oct 17, 2026
CVE-2026-107752: uscnanbu Welcart e-Commerce: The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON…	4.9 Medium	N/A	N/A	Oct 17, 2026
CVE-2026-107744: thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses: The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to…	6.5 Medium	N/A	N/A	Oct 17, 2026
CVE-2026-104736: thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses: The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via…	9.8 Critical	N/A	N/A	Oct 17, 2026
CVE-2026-103899: daigo75 EU VAT Assistant for WooCommerce: The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…	7.2 High	N/A	N/A	Oct 17, 2026
CVE-2026-111602: latepoint Appointment Booking Plugin – LatePoint \| Calendar & Scheduling for WordPress: The Appointment Booking Plugin – LatePoint \| Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to…	3.7 Low	N/A	N/A	Oct 17, 2026
CVE-2026-111601: hippooo Hippoo Mobile App for WooCommerce: The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…	6.1 Medium	N/A	N/A	Oct 17, 2026
CVE-2026-110653: latepoint Appointment Booking Plugin – LatePoint \| Calendar & Scheduling for WordPress: The Appointment Booking Plugin – LatePoint \| Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to…	9.1 Critical	N/A	N/A	Oct 17, 2026
CVE-2026-109208: thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses: The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored…	7.2 High	N/A	N/A	Oct 17, 2026
CVE-2026-107763: hostspa Fastcache by Host.it: The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…	4.3 Medium	N/A	N/A	Oct 17, 2026
CVE-2026-107762: themeum: The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct…	7.5 High	N/A	N/A	Oct 17, 2026
CVE-2026-104734: themeum: The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object…	7.2 High	N/A	N/A	Oct 17, 2026
CVE-2026-111855: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1	7.5 High	N/A	N/A	Oct 17, 2026
CVE-2026-111854: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1	8.1 High	N/A	N/A	Oct 17, 2026
CVE-2026-111853: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1	8.8 High	N/A	N/A	Oct 17, 2026
CVE-2026-111823: Mage mage-ai: Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.	9.8 Critical	N/A	N/A	Oct 17, 2026
CVE-2026-17591: A flaw was found in libarchive	3.6 Low	N/A	N/A	Oct 16, 2026
CVE-2026-111802: A flaw was found in Nautilus	6.6 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-110759: Improper Validation of Syntactic Correctness of Input	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-110758: Buffer Under-read	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-110757: Improper Encoding or Escaping of Output	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-110756: Improper Encoding or Escaping of Output	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-110755: Inefficient Algorithmic Complexity	N/A	N/A	N/A	Oct 16, 2026

Rows per page

26-50 of 412906

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business