Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-106010: Unknown BDM Digital Payment Gateway: The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-103311: Unknown Coinbase Commerce Payment Gateway for WooCommerce: The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity…	5.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-112089: Dav-ee dairy-management-system: A security vulnerability has been detected in Dav-ee dairy-management-system…	4.7 Medium	2.0 Low	N/A	Oct 19, 2026
CVE-2026-16460: Red Hat: A flaw was found in bootc and ostree	7.4 High	N/A	N/A	Oct 19, 2026
CVE-2026-112088: Dav-ee dairy-management-system: A weakness has been identified in Dav-ee dairy-management-system…	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-76740: Hewlett Packard Enterprise: A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280…	7.2 High	N/A	N/A	Oct 19, 2026
CVE-2026-94273: Unknown Snap Finance: The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-91047: Unknown ElementsReady Addons for Elementor: The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-91046: Unknown ElementsReady Addons for Elementor: The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-89286: Unknown FormFlow for GoHighLevel (GHL): The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-76739: Hewlett Packard Enterprise: A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server…	4.3 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-16487: Red Hat: A flaw was found in bootc when operating with the default containers signature policy	8.1 High	N/A	N/A	Oct 19, 2026
CVE-2026-112086: n/a ESPnet: A vulnerability was found in ESPnet up to 202610.post2	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112083: sgl-project SGLang: A security flaw has been discovered in sgl-project SGLang up to 0.5.19	5.3 Medium	5.5 Medium	N/A	Oct 19, 2026
CVE-2026-112082: sgl-project SGLang: A vulnerability was identified in sgl-project SGLang up to 0.5.19	7.5 High	7.7 High	N/A	Oct 19, 2026
CVE-2026-112081: hankcs HanLP: A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-108121: Koozali SME Server: Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's…	N/A	6.9 Medium	N/A	Oct 19, 2026
CVE-2026-108120: koozali SME Server: Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of…	N/A	7.7 High	N/A	Oct 19, 2026
CVE-2026-106933: Unknown Blaze Demo Importer: The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-106028: Unknown ActiveTrail for WooCommerce: The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-106014: Unknown Gateway for Vantiv on WC: The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-112087: itsourcecode Online Cake Ordering System: A weakness has been identified in itsourcecode Online Cake Ordering System 1.0	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112080: LlamaChinese Llama-Chinese: A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112079: hankcs HanLP: A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64	6.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112078: RVC-Project Retrieval-based-Voice-Conversion-WebUI: A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718	6.3 Medium	2.1 Low	N/A	Oct 19, 2026

Rows per page

26-50 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business