Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-68985: Samsung Semiconductor: In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-68984: Samsung Semiconductor: In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48186: Samsung Semiconductor: Improper handling of messages before AS security activation can cause unexpected behavior	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48183: Samsung Semiconductor: Improper permission handling during buffer operations allows untrusted applications to create memory mappings with…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48179: Samsung Semiconductor: In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48178: Samsung Semiconductor: Out of bound access in PPC due to race condition in global variable access	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48176: Samsung Semiconductor: A memory corruption vulnerability caused by improper validation of messages	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48175: Samsung Semiconductor: Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48174: Samsung Semiconductor: In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48173: Samsung Semiconductor: In the NAS message handler, improper validation of the length field in NAS message causes memory corruption	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-35495: Samsung Semiconductor: In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-35494: Samsung Semiconductor: In the baseband, memory corruption during NAS packet processing can cause a denial of service.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-33972: Samsung Semiconductor: In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-33971: Samsung Semiconductor: In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-33969: Samsung Semiconductor: In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop,…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-33965: Samsung Semiconductor: An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-33958: Samsung Semiconductor: Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-122992: G4KLX DStarGateway: In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer…	N/A	9.2 Critical	N/A	Nov 5, 2026
CVE-2026-122323: kyverno: Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows…	7.5 High	8.7 High	N/A	Nov 5, 2026
CVE-2026-122322: kyverno: Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows…	7.5 High	8.7 High	N/A	Nov 5, 2026
CVE-2026-122321: kyverno: Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification…	9.1 Critical	8.5 High	N/A	Nov 5, 2026
CVE-2026-122320: kyverno: Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read…	7.7 High	8.3 High	N/A	Nov 5, 2026
CVE-2026-122319: kyverno: Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to…	7.5 High	8.7 High	N/A	Nov 5, 2026
CVE-2026-122318: kyverno: Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and…	7.7 High	7.2 High	N/A	Nov 5, 2026
CVE-2026-122316: kyverno: Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background…	8.5 High	8.4 High	N/A	Nov 5, 2026

25 rows per page

26-50 of 418286

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business