Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-110887: HivePress: Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote…	9.9 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-110379: Ays Pro Quiz Maker: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz…	7.1 High	N/A	N/A	Oct 19, 2026
CVE-2026-108837: Apache Software Foundation Apache Kylin: Allocation of resources without limits or throttling vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108833: Apache Software Foundation Apache Kylin: Default startup profile miss security settings in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108823: Apache Software Foundation Apache Kylin: Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108780: Apache Software Foundation Apache Kylin: Potential JDBC source configuration validation vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108776: Apache Software Foundation Apache Kylin: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108771: Apache Software Foundation Apache Kylin: Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108766: Apache Software Foundation Apache Kylin: Missing authorization on jdbc source config update in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108764: Apache Software Foundation Apache Kylin: Server-Side request forgery (SSRF) vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-108762: Apache Software Foundation Apache Kylin: Path-confinement bypass during metadata backup deletion in Apache Kylin	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-79985: Apache Software Foundation Apache Camel: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB…	7.4 High	N/A	N/A	Oct 19, 2026
CVE-2026-79984: Apache Software Foundation Apache Camel: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP…	7.4 High	N/A	N/A	Oct 19, 2026
CVE-2026-112104: eremef bandcamp-player: A flaw has been found in eremef bandcamp-player up to 1.8.33-beta	7.3 High	6.9 Medium	N/A	Oct 19, 2026
CVE-2026-79983: Apache Software Foundation Apache Camel: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP…	7.4 High	N/A	N/A	Oct 19, 2026
CVE-2026-78165: Apache Software Foundation Apache Camel: Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component	8.8 High	N/A	N/A	Oct 19, 2026
CVE-2026-78164: Apache Software Foundation Apache Camel: Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an…	8.2 High	N/A	N/A	Oct 19, 2026
CVE-2026-78163: Apache Software Foundation Apache Camel: Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and…	5.9 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-78162: Apache Software Foundation Apache Camel: Deserialization of Untrusted Data vulnerability in Apache Camel	N/A	10.0 Critical	N/A	Oct 19, 2026
CVE-2026-112103: f3-factory fatfree-core: A vulnerability has been found in f3-factory fatfree-core up to 3.9.2	3.7 Low	6.3 Medium	N/A	Oct 19, 2026
CVE-2026-13695: Integratec: SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects…	N/A	8.8 High	N/A	Oct 19, 2026
CVE-2026-112180: MISP: MISP contains a data integrity flaw in its event deletion logic	N/A	5.1 Medium	N/A	Oct 19, 2026
CVE-2026-112179: MISP: In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push	N/A	5.3 Medium	N/A	Oct 19, 2026
CVE-2026-112178: MISP: MISP contains an access control flaw in the proposal (shadow attribute) visibility logic	N/A	7.1 High	N/A	Oct 19, 2026
CVE-2026-112161: Mobatek MobaXterm: MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity	N/A	8.5 High	N/A	Oct 19, 2026

Rows per page

26-50 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business